Adirati 



TOTAL ACCESS 600R 
User Interface Guide (UIG) 



64200600L1#T-31A 
April 2002 



Total Access 600R User Interface Guide (UIG) 



Trademarks 

Any brand names and product names included in this manual are trademarks, registered trademarks, or trade 
names of their respective holders. 

To the Holder of the Manual 

The contents of this manual are current as of the date of publication. ADTRAN reserves the right to change 
the contents without prior notice. 

In no event will ADTRAN be liable for any special, incidental, or consequential damages or for commercial 
losses even if ADTRAN has been advised thereof as a result of issue of this publication. 



Apirati 

90 1 Explorer Boulevard 
P.O. Box 140000 
Huntsville, AL 35814-4000 
(256) 963-8000 

©2002 ADTRAN, Inc. 
All Rights Reserved. 
Printed in U.S.A. 



Page 2 



©2002, ADTRAN, Inc. 



64200600L1#T-31A 



Total Access 600R User Interface Guide (UIG) 




Notes provide additional useful information. 




Caution signify information that could prevent service interruption. 



Warnings provide information that could prevent damage to the equipment or 
iJjV^^ endangerment to human life. 



Safety Instructions 

When using your telephone equipment, please follow these basic safety precautions to reduce the risk of fire, 
electrical shock, or personal injury: 

1 . Do not use this product near water, such as a bathtub, wash bowl, kitchen sink, 
laundry tub, in a wet basement, or near a swimming pool. 

2. Avoid using a telephone (other than a cordless-type) during an electrical storm. 
There is a remote risk of shock from lightning. 

3. Do not use the telephone to report a gas leak in the vicinity of the leak. 

4. Use only the power cord, power supply, and/or batteries indicated in the man- 
ual. Do not dispose of batteries in a fire. They may explode. Check with local 
codes for special disposal instructions. 



Save These Important Safety Instructions 
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FCC regulations require that the following information be provided in this manual 
to the customer: 

1. This equipment complies with Part 68 of the FCC rules. On the side of the bot- 
tom of this equipment is a label that contains, among other information, the 
FCC Registration Number and Ringer Equivalence Number (REN), if applica- 
ble, for this equipment. If required, this information must be given to the tele- 
phone company. 

2. An FCC-compliant telephone cord and modular plug is provided with this 
equipment. This equipment is designed to be connected to the telephone net- 
work or premises wiring using a compatible modular jack which is Part 68- 
compliant. See installation instructions for details. 

3. If your telephone equipment (Total Access 600R) causes harm to the telephone 
network, the telephone company may discontinue your service temporarily. If 
possible, they will notify you in advance. But if advance notice isn't practical, 
you will be notified as soon as possible. You will be advised of your right to 
file a complaint with the FCC. 

4. Your telephone company may make changes in its facilities, equipment, opera- 
tions, or procedures that could affect the proper operation of your equipment. If 
they do, you will be given advance notice to give you an opportunity to main- 
tain uninterrupted service. 

5. If you experience trouble with this equipment (Total Access 600R), please con- 
tact ADTRAN for repair/warranty information. The telephone company may 
ask you to disconnect this equipment from the network until the problem has 
been corrected or until you are sure the equipment is not malfunctioning. 

6. This unit contains no user-serviceable parts. 

7. The FCC recommends that the AC outlet to which equipment requiring AC 
power is to be installed is provided with an AC surge arrester. 

8. The REN is used to determine the quantity of devices which may be connected 
to the telephone line. Excessive RENs on the telephone line may result in the 
devices not ringing in response to an incoming call. In most, but not all areas, 
the sum of RENs should not exceed five (5.0). To be certain of the number of 
devices that may be connected to a line, as determined by the total RENs, con- 
tact the local telephone company. 

9. The following information may be required when applying to your local tele- 
phone company for leased line facilities. 

Service Type REN/SOC FIC USOC 

1 .544 Mbps - ESF and B8ZS 6.0N 04DU9-1 SN RJ-48C 
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Federal Communications Commission (FCC) Statement 

This equipment has been tested and found to comply with the limits for a Class A digital device, 
pursuant to Part 15 of the FCC Rules. These limits are designed to provide reasonable protection 
against harmful interference when the equipment is operated in a commercial environment. This 
equipment generates, uses, and can radiate radio frequency energy and, if not installed and used in 
accordance with the instruction manual, may cause harmful interference to radio frequencies. 
Operation of this equipment in a residential area is likely to cause harmful interference in which 
case the user will be required to correct the interference at his own expense. 



Change or modifications to this unit not expressly approved by the party 
responsible for compliance could void the user s authority to operate the 
equipment. 
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Industry Canada Compliance Information 

Notice: The Industry Canada label applied to the product (identified by the Industry Canada logo or the 
"IC:" in front of the certification/registration number) signifies that the Industry Canada technical 
specifications were met. 

Notice: The Ringer Equivalence Number (REN) for this terminal equipment is supplied in the 
documentation or on the product labeling/markings. The REN assigned to each terminal device indicates 
the maximum number of terminals that can be connected to a telephone interface. The termination on an 
interface may consist of any combination of devices subject only to the requirement that the sum of the 
RENs of all the devices should not exceed five (5). 

Canadian Emissions Requirements 

This digital apparatus does not exceed the Class A limits for radio noise emissions from digital apparatus 
as set out in the interference-causing equipment standard entitled "Digital Apparatus," ICES-003 of the 
Department of Communications. 

Cet appareil numerique respecte les limites de bruits radioelectriques applicables aux appareils numeriques 
de Class A prescrites dans la norme sur le materiel brouilleur: "Appareils Numeriques," NMB-003 edictee 
par le ministre des Communications. 
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Affidavit Requirements for Connection to Digital Services 

• An affidavit is required to be given to the telephone company whenever digital terminal 
equipment without encoded analog content and billing protection is used to transmit digital 
signals containing encoded analog content which are intended for eventual conversion into 
voiceband analog signals and transmitted on the network. 

• The affidavit shall affirm that either no encoded analog content or billing information is being 
transmitted or that the output of the device meets Part 68 encoded analog content or billing 
protection specifications. 

• End user/customer will be responsible for filing an affidavit with the local exchange carrier 
when connecting unprotected customer premise equipment (CPE) to 1 .544 Mbps or subrate 
digital services. 

• Until such time as subrate digital terminal equipment is registered for voice applications, the 
affidavit requirement for subrate services is waived. 
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Affidavit for Connection of Customer Premises Equipment 
to 1.544 Mbps and/or Subrate Digital Services 

For the work to be performed in the certified territory of (telco name) 

State of 



County of 

I, (name), (business address), 

(telephone number) being duly sworn, state: 

I have responsibility for the operation and maintenance of the terminal equipment to be 

connected to 1.544 Mbps and/or subrate digital services. The terminal equipment 

to be connected complies with Part 68 of the FCC rules except for the encoded analog 
content and billing protection specifications. With respect to encoded analog content and 
billing protection: 

( ) I attest that all operations associated with the establishment, maintenance, and adjustment of 
the digital CPE with respect to analog content and encoded billing protection information con- 
tinuously complies with Part 68 of the FCC Rules and Regulations. 

( ) The digital CPE does not transmit digital signals containing encoded analog content or billing 
information which is intended to be decoded within the telecommunications network. 

( ) The encoded analog content and billing protection is factory set and is not under the control of 
the customer. 

I attest that the operator(s)/maintainer(s) of the digital CPE responsible for the establish- 
ment, maintenance, and adjustment of the encoded analog content and billing information 
has (have) been trained to perform these functions by successfully having completed one of 
the following (check appropriate blocks): 

( ) A. A training course provided by the manufacturer/grantee of the equipment used to encode 
analog signals; or 

( ) B. A training course provided by the customer or authorized representative, using training 
materials and instructions provided by the manufacturer/grantee of the equipment used to 
encode analog signals; or 

( ) C. An independent training course (e.g., trade school or technical institution) recognized by 
the manufacturer/grantee of the equipment used to encode analog signals; or 

( ) D. In lieu of the preceding training requirements, the operator(s)/maintainer(s) is (are) under 
the control of a supervisor trained in accordance with (circle one) above. 
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I agree to provide (telco's name) with proper documentation to 

demonstrate compliance with the information as provided in the preceding paragraph, if so 
requested. 

Signature 

Title 

Date 



Transcribed and sworn to before me 

This day of , 20_ 



Notary Public 

My commission expires: 
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Warranty and Customer Service 

ADTRAN will repair and return this product within ten years from the date of shipment if it does not meet 
its published specifications or fails while in service. For detailed warranty, repair, and return information 
refer to the ADTRAN Equipment Warranty and Repair and Return Policy Procedure. 

Return Material Authorization (RMA) is required prior to returning equipment to ADTRAN. 

For service, RMA requests, or further information, contact one of the numbers listed at the end of this 
section. 



LIMITED PRODUCT WARRANTY 

ADTRAN warrants that for ten years from the date of shipment to Customer, all products manufactured by 
ADTRAN will be free from defects in materials and workmanship. ADTRAN also warrants that products 
will conform to the applicable specifications and drawings for such products, as contained in the Product 
Manual or in ADTRAN's internal specifications and drawings for such products (which may or may not be 
reflected in the Product Manual). This warranty only applies if Customer gives ADTRAN written notice of 
defects during the warranty period. Upon such notice, ADTRAN will, at its option, either repair or replace 
the defective item. If ADTRAN is unable, in a reasonable time, to repair or replace any equipment to a 
condition as warranted, Customer is entitled to a full refund of the purchase price upon return of the 
equipment to ADTRAN. This warranty applies only to the original purchaser and is not transferable 
without ADTRAN's express written permission. This warranty becomes null and void if Customer 
modifies or alters the equipment in any way, other than as specifically authorized by ADTRAN. 

EXCEPT FOR THE LIMITED WARRANTY DESCRIBED ABOVE, THE FOREGOING 
CONSTITUTES THE SOLE AND EXCLUSIVE REMEDY OF THE CUSTOMER AND THE 
EXCLUSIVE LIABILITY OF ADTRAN AND IS IN LIEU OF ANY AND ALL OTHER WARRANTIES 
(EXPRESSED OR IMPLIED). ADTRAN SPECIFICALLY DISCLAIMS ALL OTHER WARRANTIES, 
INCLUDING (WITHOUT LIMITATION), ALL WARRANTIES OF MERCHANTABILITY AND 
FITNESS FOR A PARTICULAR PURPOSE. SOME STATES DO NOT ALLOW THE EXCLUSION 
OF IMPLIED WARRANTIES, SO THIS EXCLUSION MAY NOT APPLY TO CUSTOMER. 

In no event will ADTRAN or its suppliers be liable to Customer for any incidental, special, punitive, 
exemplary or consequential damages experienced by either Customer or a third party (including, but not 
limited to, loss of data or information, loss of profits, or loss of use). ADTRAN is not liable for damages 
for any cause whatsoever (whether based in contract, tort, or otherwise) in excess of the amount paid for 
the item. Some states do not allow the limitation or exclusion of liability for incidental or consequential 
damages, so the above limitation or exclusion may not apply to Customer. 
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Customer Service, Product Support Information, and Training 

ADTRAN will repair and return this product if within ten years from the date of shipment the product does 
not meet its published specification or the product fails while in service. 

A return material authorization (RMA) is required prior to returning equipment to ADTRAN. For service, 
RMA requests, training, or more information, use the contact information given below. 

Repair and Return 

If you determine that a repair is needed, please contact our Customer and Product Service (CAPS) 
department to have an RMA number issued. CAPS should also be contacted to obtain information 
regarding equipment currently in house or possible fees associated with repair. 

CAPS Department (256) 963-8722 

Identify the RMA number clearly on the package (below address), and return to the following address: 

ADTRAN Customer and Product Service 
901 Explorer Blvd. (East Tower) 
Huntsville, Alabama 35806 

RMA # 

Pre-Sales Inquiries and Applications Support 

Your reseller should serve as the first point of contact for support. If additional pre-sales support is needed, 
the ADTRAN Support web site provides a variety of support services such as a searchable knowledge 
base, latest product documentation, application briefs, case studies, and a link to submit a question to an 
Applications Engineer. All of this, and more, is available at: 

http://support.adtran.com 

When needed, further pre-sales assistance is available by calling our Applications Engineering 
Department. 

Applications Engineering (800) 61 5-1 1 76 
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Post-Sale Support 

Your reseller should serve as the first point of contact for support. If additional support is needed, the 
ADTRAN Support web site provides a variety of support services such as a searchable knowledge base, 
updated firmware releases, latest product documentation, service request ticket generation and trouble- 
shooting tools. All of this, and more, is available at: 

http://support.adtran.com 

When needed, further post-sales assistance is available by calling our Technical Support Center. Please 
have your unit serial number available when you call. 



Installation and Maintenance Support 

The ADTRAN Custom Extended Services (ACES) program offers multiple types and levels of installation 
and maintenance services which allow you to choose the kind of assistance you need. This support is 
available at: 

http ://www. adtran . com/ace s 
For questions, call the ACES Help Desk. 



The Enterprise Network (EN) Technical Training Department offers training on our most popular products. 
These courses include overviews on product features and functions while covering applications of 
ADTRAN's product lines. ADTRAN provides a variety of training options, including customized training 
and courses taught at our facilities or at your site. For more information about training, please contact your 
Territory Manager or the Enterprise Training Coordinator. 



Technical Support 



(888) 4ADTRAN 



ACES Help Desk 



(888) 874-ACES (2237) 



Training 



Training Phone 
Training Fax 
Training Email 



(800)615-1176, ext. 7500 
(256) 963-6700 
training@adtran.com 
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TOTAL ACCESS 600R USER INTERFACE GUIDE 

This User Interface Guide is designed for use by network administrators and others who will configure and provision 
the system. It contains information about navigating the VT 100 user interface, configuration information, and menu 
descriptions. 

Table of Contents 

Navigating the Terminal Menu 15 

Terminal Menu Window 15 

Navigating using the Keyboard Keys 17 

Terminal Menu and System Control 20 

Selecting the Appropriate Menu 20 

Security Levels 20 
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1. NAVIGATING THE TERMINAL MENU 
Terminal Menu Window 

The Total Access 600R uses a multi-level menu structure that contains both menu items and data fields. All menu items 
and data fields display in the terminal menu window (see Figure 1), through which you have complete control of the 
Total Access 600R. 



. PGIU - HjipeiTerminal 



File Edit View Call Iransfer Help 



□ M »|S iio|B| if| 



Q Menu Path)> 
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Figure 1. Top-Level Terminal Menu Window 



Menu Path 

The first line of the terminal menu window (the menu path) shows the session's current position (path) in the menu 
structure. For example, Figure 1 shows the top-level menu with the cursor on the SYSTEM INFO submenu; therefore, 
the menu path reads TA 600R/SYSTEM INFO. 



64200600L1#T-31A 



©2002, ADTRAN, Inc. 



Page 15 



Total Access 600R User Interface Guide (UIG) 



Window Panes 

When you first start a terminal menu session, the terminal menu window is divided into left and right panes. The left 
pane shows the list of available submenus, while the right pane shows the contents of the currently selected submenu. 

You can view the terminal windows in two ways: with fields and submenus displaying horizontally across the right 
pane, or with fields and submenus displaying vertically down the right pane. Viewing submenus vertically rather than 
horizontally allows you to see information at a glance rather than scrolling horizontally across the window. To change 
the view, move your cursor to an index number and press <Enter>. Figure 2 shows this alternate view. Fields and sub- 
menu names may vary slightly in this view. 
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Figure 2. Alternate Menu View 
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Window Pane Navigation 

Use the following chart to assist you in moving between and within the two window panes. 



To do this... 


Press this key... 


TVTovp from left nane to rioiit nane 

ITIUV V 11 Ulll Ivll L/Clll^ IV lltlll L/C111W 


Tab 




Enter 




Right arrow 


Move from right pane to left pane 


Tab 




Escape 




Left arrow 




Backspace 


Move within each pane 


Up arrow 




Down arrow 




Left arrow 




Right arrow 



Right Window Pane Notation 

The right window pane shows the contents of the currently selected menu. These contents can include both 
submenu items and data fields. Some submenus contain additional submenus and some data fields contain 
additional data fields. The following chart explains the notation used to identify these additional items. 



This notation... 


Means that... 


[+] 


More items are available when selected 


<+> 


An action is to be taken, such as activating a test 


Highlighted menu item 


You can enter data in this field 


Underlined field 


The field contains read-only information 



Additional Terminal Menu Window Features 

Tool Tip - provides a brief description of the currently selected mode 
• Network Status - displays network status information, Up or Down 

Extended Help - displays information about selected commands (CTRL+A) 

Navigation Help - lists characters used for navigating the terminal menu and session management (CTRL+Z) 
System Time - displays current time 

Navigating using the Keyboard Keys 

You can use various keystrokes to move through the terminal menu, to manage a terminal menu session, and to con- 
figure the system. Press <CTRL+Z> to activate a pop-up screen listing the navigation keystrokes. 
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Moving through the Menus 



To do this... 


Press this key... 


Return to the home screen 


H 


Jump between two menu items 

Press <J> while the cursor is located on a menu item, and you jump back to the main screen. 

Go to another menu item, press <J>, and you jump back to the screen that was displayed the 
first time you pressed <J>. 

Press <J> anytime you want to jump between these items. 


J 


Select items 


Arrows 


Edit a selected menu item 


Enter 


Cancel an edit 


Escape 


Close pop-up help screen 


Escape 


Move between the left and right panes 


Tab 
Arrows 


Move to the top of a screen 


A 


Move to the bottom of a screen 


Z 


Ascend one menu level 


Backspace 



Session Management Keystrokes 



To do this... 


Press this key... 


Log out of a session 


CTRL+L 


Refresh the screen 

To save time, only the portion of the screen that has changed is refreshed. This option should 
only be necessary if the display picks up incorrect characters. 


CTRL+R 
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Configuration Keystrokes 



To do this... 


Press this key... 


Restore factory default settings. 

This setting restores the factory defaults based on the location of the cursor. If the cursor is 
on a module line (in the MODULES menu), then only the selected module is updated to fac- 
tory defaults. 


F 


Copy selected items to the clipboard. 

The amount of information you can copy depends on the cursor location when you press 

<C>: 

If the cursor is over an editable field, only that item is copied. 

If the cursor is over the index number of a list, then all of the items in the row of the list are 
copied. For example, if the cursor is over the DSO field in the MAP 1 screen, all of the in- 
formation associated with the DSO is copied. 


C 


Paste the item stored in the clipboard, if the information is compatible. 
You must confirm all pastes - except those to a single editable field. 


P 


Increment the value of certain types of fields by one when you paste information into those 
fields. 


> 


Decrement the value of certain types of fields by one when you paste information into those 
fields. 


< 


Insert a new list item. 

For example, add a new item to the TELNET USER LIST connection list by pressing <I> while 
the cursor is over the index number. 


I 


Delete a list item. 

For example, delete an item from the TELNET USER LIST connection list by pressing <D> 
while the index number is active. 


D 



Getting Help 

The bottom line of the terminal menu window contains context-sensitive help information. When the cursor is posi- 
tioned over a set of configuration items, a help message displays (when available) providing a description of the item. 
When more detailed help is available for a particular item, A A displays at the bottom of the window. At this point, if 
you press <CTRL+A>, a pop-up help screen displays with information about the item. 

Press <CTRL+Z> to activate a help screen that displays the available keystrokes you can use to navigate the terminal 
menu. 

Press <ESC> to cancel these pop up windows. 
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2. TERMINAL MENU AND SYSTEM CONTROL 
Selecting the Appropriate Menu 



The terminal menu is the access point to all other operations. Each terminal menu item has several functions and sub- 
menus that identify and provide access to specific operations and parameters. Use the chart below to help select the 
appropriate terminal menu. 



To do this... 


Go to this menu... 


Review and monitor general system information for the Total Access 600R 


System Info 


Set up the operational configuration for the Total Access 600R 


System Config 


Upgrade firmware, do config transfers, ping, and access terminal mode 


System Utility 


Define, configure, and monitor all Total Access 600R Router functions 


Router 


Review and configure settings for the network interface and configure the DSO 
maps 


Modules 



Security Levels 



To edit terminal menu items, you must have a password and the appropriate security level. Table 1 describes the secu- 
rity levels. 

Table 1. Password Security Level 



Security Level 


Description 


5 


Read-only permission for all menu items - minimum rights 


4 


Read permission for all menu items and permission to use test commands 


3 


Access to all commands except passwords, flash download, authentication methods, 
interface configurations, and telnet security levels 


2 


Access to all commands except passwords, flash download, authentication methods, and 
telnet security levels 


1 


Access to all commands except passwords and telnet security levels 


0 


Permission to edit every menu item, including creating and editing passwords - maximum 
rights 


Router Only 


Read access to all menus and write access to only the router menu 
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3. CONFIGURING THE TOTAL ACCESS 600R 
System Info 

The SYSTEM INFO menu provides basic information about the unit as well as data fields for editing information. Figure 
3 displays the submenus that are available when you select this menu item. 
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Figure 3. System Information Menu 

System InfoSystem Name 

Provides a user-configurable text string for the name of the Total Access 600R. This name can help you distinguish 
between different installations. You can enter up to 3 1 alpha-numeric characters in this field, including spaces and spe- 
cial characters (such as an underscore). This name will appear on the top line of all screens. The factory default is to 
have no entry in the system name field. 

System InfoSystem Location 

Provides a user-configurable text string for the location of the Total Access 600R. This field is to help you keep track 
of the actual physical location of the unit. You can enter up to 3 1 alphanumeric characters in this field, including spaces 
and special characters (such as an underscore). The factory default is to have no entry in the system location field. 

System InfoSystem Contact 

Provides a user-configurable text string for a contact name. You can use this field to enter the name, phone number, 
or email address of a person responsible for the Total Access 600R system. You can enter up to 3 1 alpha-numeric char- 
acters in this field, including spaces and special characters (such as an underscore). The factory default is to have no 
entry in the system contact field. 



System InfoUnit Name 

Product-specific name. 
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System Info>Part Number 

ADTRAN part number for the Total Access 600R. 

System Info>Serial Number 

Serial number of the Total Access 600R. 

System InfoFirmware Revision 

Displays the current firmware revision level of the Total Access 600R. 

System Info>Bootcode Revision 

Displays the bootcode revision. 

System InfoSystem Uptime 

Displays the length of time since the last Total Access 600R system reboot. 



Each time you reset the system, this value resets to 0 days, 0 hours, 0 min and 0 sees. 



System Info>Date/Time 

Displays the current date and time, including seconds. This field can be edited. Enter the time in 24-hour format (such 
as 23:00:00 for 1 1:00 pm). Enter the date in mm-dd-yyyy format (for example, 10-30-1998). 
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System Config 

Set up the Total Access 600R operational configuration from the SYSTEM CONFIG menu. Figure 4 shows the items 
included in this menu. 
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Figure 4. System Config Menu 

System ConfioOperating Mode 

For the Tl TDM application, the mode will be displayed as Channel Bank. 

System Config>T1 Timing Mode 

The T1 Timing Mode choices are Network and Internal. Select Network if the TELCO is providing clocking on the 
Tl line. Select Internal if there is no timing on the Tl circuit and the 600R will have to provide the clock. Default is 
Network. 

System ConfioTel.net Access 

Sets Telnet access to On or Off. The factory default value for this parameter is On. 

System ConfioTel.net User List 
System ConfioTel.net User List>Name 

Up to four users can be configured for access to the 600R. Each user can be assigned a security level and time out. 

The name is a text string of the user name for this session. You can enter up to 15 characters in this field. The factory 
default is no entry in the NAME field. 
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System ConfioTelnet User List>Authen Method 

The user can be authenticated by selecting: 

Password The Password field is used to authenticate the user. 

Radius The Radius client is used for authenticating the user. 

The factory default is password. 

System ConfioTelnet User List>Password 

When the authenticating method is password, this text string is used for the password. You can enter up to 1 5 characters 
in this field. The factory default is no entry in this field. 

System ConfioTelnet User List>Idle Time (mins) 

This sets the amount of time in minutes you can be idle before you are automatically logged off. The factory default 
is 10 minutes. The range is 1-255 minutes. 

System ConfioTelnet User List>Level 

This is the security level granted to the user. The table below gives a brief description of each level. The factory default 
is 0. 



Select level... 


If you want the user to.... 


5 


Have read-only permission for all menu items - minimum rights 


4 


Have read permission for all menu items and permission to use test commands 


3 


Have access to all commands except passwords, flash download, 
authentication methods, interface configurations, and telnet security levels. 


2 


Have access to all commands except passwords, flash download, 
authentication methods, and telnet security levels. 


1 


Have access to all commands except passwords and telnet security levels. 


0 


Have permission to edit every menu item, including creating and editing 
passwords — maximum rights 


Router Only 


Have read access to all menu items and write access to only the router menu. 



System Config>Telnet IP Access List 

System ConfioTelnet IP Access List>Network Address and Mask 

This is a list of allowed telnet managers. Enter a network address and subnet mask from which telnet access to the 
Total Access 600R is allowed. When a remote unit requests telnet access to the Total Access 600R, if the access list 
is empty or the remote's IP address matches a list entry, remote access is granted. A subnet mask of 0.0.0.0 will allow 
any host telnet access, regardless of the network address. A network address of 0.0.0.0 with a corresponding netmask 
of 255.255.255.255 will disallow any host telnet access. 

The factory default is 0.0.0.0 for both parameters, which will allow all users telnet IP access. 
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System Config>SNMP Menu 
System ConfioSNMP Menu>Access 

The Total Access 600R is an SNMP agent. The SNMP Menu parameters set up the manager, communities, and levels. 
When set to Off, SNMP access is denied. When set to On, the 600R will respond to SNMP managers based on the 
configuration. The factory default is On. 

System ConfioSNMP Menu>Communities 



System ConfioSNMP Menu>Communities>Name 

This list is used to set up to 60 SNMP communities names that the 600R will allow. This is a text string 
for the community name. You can enter up to 3 1 characters in this field. The factory default is no entry 
in the name parameter. 

System ConfioSNMP Menu>Communities>Privilege 

The access for this manager can be assigned three levels. The factory default is None. 

None No access is allowed for this community or manager. 

Get Manager can only read items. 

Get/Set Manager can read and set items. 

System ConfioSNMP Menu>Communities>Manager IP 

This is the IP address of the SNMP manager. If set to 0.0.0.0, any SNMP manager can access the Total 
Access 600R for this community. The factory default is 0.0.0.0. 

System ConfioSNMP Menu>Traps 



System ConfioSNMP Menu>Traps>Manager Name 

The 600R can generate SNMP traps. This list allows up to four managers to be listed to receive traps. 
Manager Name is the text string describing the name of the entry. It is intended for easy reference and 
has no bearing on the SNMP trap function. You can enter up to 3 1 characters in this field. The factory 
default is no entry in the manager name field. 

System ConfioSNMP Menu>Traps>Manager IP 

This is the IP address of the manager that is to receive the traps. The factory default is 0.0.0.0. 

System ConfioSNMP Menu>FDL 



System ConfioSNMP Menu>FDL>Mode 

This enables the FDL (only in ESF mode) to be used for management. Learning mode can also be 
enabled so the Total Access 600R can "learn" its IP configuration to be used for its FDL management. 
Once it learns this information from, for example a Total Access 4303, the configuration items populate. 
The factory default is On. 



System ConfioSNMP Menu>FDL>Link IP Address 

This is the local IP address used for the FDL management. The FDL uses a separate IP network for 
communication, distinct from the customer data configured under the Router menus. The factory 
default is 0.0.0.0. 
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System ConfioSNMP Menu>FDL>Far End IP Address 

This is the far-end IP address used for FDL management. The FDL is a separate IP network from the 
customer data that is configured under the Router menus. The factory default is 0.0.0.0. 

System ConfioSNMP Menu>FDL>IP Netmask 

This is the subnet mask defining the IP network used for FDL management. The factory default is 
0.0.0.0. 

System ConfioSNMP Menu>FDL>Learn Address 

When set to On, the destination address on each received packet is assumed to be the FDL interface 
address. A 255.255.255.252 netmask is used, which determines the far-side address as well (since there 
can be only two addresses on a subnet with that netmask). When set to OFF, the user must input the IP 
address assigned to the FDL interface. Default is On. 

System ConfioSNMP Menu>FDL>Accept All SNMP 

When set to On, SNMP gets/sets received over the FDL link are always accepted regardless of the com- 
munity table. When set to Off, the community table is searched for valid manager IP addresses and the 
SNMP traffic is rejected if a match is not found. Default is On. 

System ConfioMaint Port Menu 

System ConfioMaint Port Menu>Password Protect 

The Total Access 600R's VT 100 CRAFT port can be accessed through a RJ-48 connector located on the rear of the 
unit. The setup for this port is under this menu. 

When Password Protect is set to No, the maintenance port is not password protected. When Yes (def), the 600R will 
prompt for a password upon startup. 

System Config>Maint Port Menu>Password 

This is the text string that is used for comparison when password protecting the maintenance port. By default, no pass- 
word is entered. You can enter up to 15 characters in this field. 



< 


The security level for the maintenance port is always set to 0. This gives full access to all menus. 




< 


Passwords are case-sensitive. 
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Instructions for Changing Passwords 


Step 


Action 


1 


Select the Password field— a new Password field displays. 


2 


Type the new password in the Enter field. 


3 


Type the new password again in the Confirm field. 




The password can contain up to 15 alphanumeric characters. You 
can also use spaces and special characters in the password. 



System ConfioMaint Port Menu>Baud Rate 

This is the asynchronous rate that the maintenance port will run. The possible values are 300, 1200, 2400, 4800, 9600, 
19200, 38400, and 57600. The default value is 9600. 

System ConfioMaint Port Menu>Data Bits 

This is the asynchronous bit rate that the maintenance port will run. The possible values are 7 or 8 (def) bits. 

System ConfioMaint Port Menu>Parity 

This is the asynchronous parity that the maintenance port will run. The possible values are None (def), Odd, or Even. 

System Config>Maint Port Menu>Stop Bits 

This is the number of stop bits used for the maintenance port. The possible values are 1 (def), 1.5 or 2. 



System ConfioNetwork Time 

System ConfioNetwork Time>Server Type 

The Total Access 600R unit time can be entered manually from the System Info menu, or the unit can receive time 
from an NTP/SNTP server. The Network Time menu includes all parameters relating to how the unit communicates 
with the time server. 

The server type defines the port on which the Total Access 600R will listen to receive timing information from the 
time server. The choices are NT Time and SNTP. When set to NT Time, the Total Access 600R will receive time from 
an NT server running SNTP software on its TIME port. When set to SNTP, the 600R will receive time directly from 
an SNTP server. The factory default is SNTP. 

System ConfioNetwork Time>Active 

This network timing feature can be turned on and off. It determines whether the unit will request and receive time from 
a time server. The choices are Yes and No. The factory default is No. 

System ConfioNetwork Time>Time Zone 

There are several time zones available for which the time may be displayed. All time zones are based off of Greenwich 
Mean Time (GMT). The choices are GMT -10 (Hawaii), GMT -9 (Alaska), GMT -8 (Pacific), GMT -7 (Mountain), 
GMT -6 (Central), GMT -5 (Eastern), and GMT. The factory default is GMT-6 (Central). 
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System ConfioNetwork Time>Adjust for Daylight Saving 

Since some areas of the world use Daylight Savings Time, the Total Access 600R is designed to adjust the time on the 
first Sunday in April and the last Sunday in October accordingly if this option is turned on. The choices are YES and 
No. The factory default is YES. 

System Config>Network Time>Host Address 

This is the IP address of the time server that the Total Access 600R will request and receive time from. The factory 
default is no entry in the host address field. 

System ConfioNetwork Time>Refresh 

This is the interval of time between each request the Total Access 600R sends out to the time server. A smaller refresh 
time guarantees that the unit receives the correct time from the server and corrects possible errors more quickly. This 
may be more taxing on the machine. A range of refresh times is available for the user to decide which is best for their 
unit. The choices are 5 mins, 10 mins, 15 mins, 20 mins, 25 mins, 30 mins, 35 mins, 40 mins, 45 mins, 50 mins, 55 mins, 
and 60 MINS. The factory default is 60 MINS. 

System ConfioNetwork Time>Status 

This displays the current status of the time negotiation process. If an error is displayed, check all connections and con- 
figurations to try to resolve the problem. 

System Utility 

Use the System Utility menu to view and set the system parameters shown in Figure 5. 
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Figure 5. System Utility Menu 
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System Utility>Upgrade Firmware 

System Utility>Upgrade Firmware>Transfer Method 

Updates firmware when Total Access 600R enhancements are released. Two transfer methods are available for use in 
updating the Total Access 600R. 

The two methods for upgrading are XMODEM and TFTP. TFTP requires a TFTP server running on the network. The 
Total Access 600R starts a TFTP client function which gets the upgrade code from the TFTP server. Selecting XMO- 
DEM will load the upgrade code through the CRAFT port using any PC terminal emulator with xmodem capability. 
The factory default is TFTP. 

System Utility>Upgrade Firmware>TFTP Server Address 

This is required when the transfer method is TFTP. It is the IP address or domain name (if DNS is configured) of the 
TFTP server. The factory default is no entry in the TFTP Server Address field. 

System Utility>Upgrade Firmware>TFTP Server Filename 

This is required when the transfer method is TFTP. It is the case-sensitive file name which contains the upgrade code. 
The factory default is no entry in the TFTP Server Filename field. 

System Utility>Upgrade Firmware>Transfer Status 

This appears when TFTP is used. It displays the status of the transfer as it happens. Any error or success message will 
be displayed here. 

System Utility>Upgrade Firmware>Start Transfer 

This activator is used when the configurable items in this menu are complete. 



System Utility>Upgrade Firmware>Abort Transfer 

Use this activator to cancel any TFTP transfer in progress. 

System Utility>Config Transfer 

System Utility>Config Transfer>Transfer Method 

Sends a file containing the Total Access 600R configuration to a PC connected to the CRAFT port using XMODEM 
protocol or to a file on a TFTP server using the TFTP protocol. 

Config Transfer also lets you save the Total Access 600R configuration as a backup file, so you can use the same 
configuration with multiple Total Access 600R units. In addition, Config Transfer can retrieve a configuration file 
from a TFTP server. 




Before using Start Transfer, the Total Access 600R should have a valid IP address, subnet mask, 
and default gateway (if required). 
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To support these transfers, ADTRAN delivers a TFTP program with the Total Access 600R called TFTP Server. You 
can configure any PC running Microsoft Windows with this software, and store a configuration file. 




Before using the TFTP method for CONFIG TRANSFER the Total Access 600R should have a valid IP 
address, subnet mask, and default gateway (if required). 



Only one configuration transfer session (upload or download) can be active at a time. 

Displays the method used to transfer the configuration file to or from a server. XMODEM and TFTP are supported. 

System Utility>Config Transfer>Transfer Type 

Only Binary transfers are currently supported from this menu. 

System Utility>Config Transfer>TFTP Server IP Address 

Specifies the IP address of the TFTP server. Get this number from your system administrator. If using the ADTRAN 
Utilities TFTP server, this number appears in the TFTP server status window. The factory default value is 0.0.0.0. 

System Utility>Config Transfer>TFTP Server Filename 

Defines the name of the configuration file that you transfer to or retrieve from the TFTP server. The default name is 
ta600.cfg, but you can edit this name. 

System Utility>Config Transfer>Current Transfer Status 

Indicates the current status of the update. 

System Utility>Config Transfer>Previous Transfer Status 

Indicates the status of the previous update. 

System Utility>Config Transfer>Load and Use Config 

Retrieves the configuration file specified in the TFTP Server Filename field from the server. To start this command, 
enter Y to begin or enter N to cancel. 



If you execute this command, the Total Access 600R retrieves the configuration file, reboots, then 
CAUTION restarts using the new configuration. 



System Utility>Config Transfer>Save Config Remotely 

Saves the configuration file specified in TFTP Server Filename to the server identified in TFTP Server IP Address. 

To start this command, enter Y to begin or enter N to cancel. 
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System Utility>Ping 

System Utility>Ping>Start/Stop 

Activator to start and cancel a ping test. 



Only one ping session can be active at a time. 



System Utility>Ping>Host Address 

IP address or domain name (if DNS is configured) of device to receive the ping. The factory default is no entry in the 
host address field. 

System Utility>Ping>Source Address 

Selects whether the ping packet should use the interface address or the NAPT (if that interface uses NAT) as the source 
address of the ping packet. This is the address that is used for ICMP requests. Interface means it will use the IP address 
associated with the WAN for outgoing packets and the Ethernet IP address for ICMP requests made on the LAN. 
NAPT address will replace the WAN IP address with the NAPT address for outgoing ICMP requests. Default is 
Interface. 

System Utility>Ping>Size (40-1500) 

Total size of the ping to send. Range is 40 to 1500 bytes. The default is 64. 

System Utility>Ping># of Packets 

Total packets to send every 2 seconds. Setting this to 0 allows the client to ping continuously. The default is 1 . 

System Utility>Ping># Transmits 

Total packets sent (read only). 

System Utility>Ping># Receives 

Total packets received (read only). 

System Utility>Ping>%Loss 

Percentage loss based on ping returned from host (read only). 

System Utility>Terminal Mode 

The terminal mode gives the user a command-line prompt. From this prompt, you can: 

Perform a reset with the command "reset" 

Perform a factory restore with the command "factory reset" 

• Configure the unit. The Total Access 600R has the ability to download a text file which contains the configuration 
of the entire unit. This configuration may then be altered in a text editor, and then uploaded to that same or any 
other Total Access 600R. 

Debug and troubleshooting. This function would be carried out with the assistance of ADTRAN Technical 
Support. 
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Router Menus 

Use the Router/Configuration menu (Figure 6) to access the Global, Ethernet, and Wan menus. 
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Figure 6. Router/Configuration Menu 



router>config 
Router>Config>Global 

Use the Global menu (Figure 7) to set up general router functions. 
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Figure 7. Global Menu 
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Router>Config>Global>IP 

This parameter is used for general IP configuration. 
Mode 

This item controls the Global option for IP routing. The choices are On and Off. The default is On. 
Static Routes 

Use this menu to enter static routes to other networks 

Active Adds this static route entry to the IP routing table when set to Yes and 

removes it (if it was previously added) if set to No. Default is Yes. 

IP Address The IP address of the host or network address of the device being routed 
to. Default is 0.0.0.0. 

Subnet Mask Determines the bits in the previous IP address that are used. If this is to be 
a host route, it must be set to all ones (255.255.255.255). Default is 0.0.0.0. 

Gateway The IP address of the router to receive the forwarded IP packet. Default is 

0.0.0.0. 

HOPS The number of router hops required to get to the network or host. 

Maximum distance is 16 hops. Default is 1 . 
Private When set to No, the 600R will advertise this static route using RIP. Setting 

to Yes means that the route is kept private. Default is No. 

DHCP Server 

Use this menu to set up the DHCP server. 

DHCP Mode When set to On, the 600R acts as a DHCP server and will dynamically 

assign IP, network mask, default gateway, and DNS addresses to any 
device which transmits a broadcast DHCP request. The addresses as- 
signed are based on the 600R's own IP address and will be within the 
same network. Default is Off. 
DHCP Renewal Time The number of hours that the DHCP server should allow the device 
(HOURS) before it is required to send a new DHCP request. The range is 0-255. 

The default is 15 hours, and 0 represents an infinite lease. 

DNS 

Enter the 600Rs domain name and the DNS servers in this menu. 

Domain Name Text string used to represent the domain name used by the 

Total Access 600R. 

Server 1 First server to which domain name requests are sent. Default is 0.0.0.0. 

Server 2 Server used as a backup, in case the primary address does not respond 

to the request. Default is 0.0.0.0. 
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UDP Relay 

This menu configures the 600R to act as a UDP relay agent for applications requiring a response from 
UDP hosts that are not on the same network segment as their clients. 



Mode 

UDP Relay List 

Relay Address 

UDP Port Type 



UDP Port 1, 2, 3 



When this option is set to On, the 600R will act as a relay agent. 
Default is Off. 

Up to four relay destination servers can be specified in this list. 
This is the IP address of the server that will receive the relay packet. 
Default is 0.0.0.0 

The choices are Standard (def) and Specified. The following 
standard UDP protocols are relayed when set: DHCP, TFTP, DNS, 
NTP (Network Time Protocol, port 123), NBNS (NetBios Name 
Server, port 137), NBDG (NetBIOS Datagram, port 138), and 
BootP. When Specified is set, the UDP port (1 to 65535) can be 
specified in the UDP Port columns (up to three per server). 
Used for specifying UDP ports to be relayed. These fields only 
apply when UDP Port Type is set to Specified. Default is 0. 



Router>Config>Global>Bridge 

The Bridge menu is used to set up the bridge parameters for the 600R. The bridging function runs at the 
Media Access Control (MAC) level which allows any protocol packets that run over Ethernet to be for- 
warded. Bridging can run concurrently with IP. However, when IP routing is active, IP packets (which 
include ARP packets) are not bridged. 

Mode 

This is used to enable the bridge function. Default is Off. 
Address Table 

The 600R automatically maintains a table of MAC addresses detected and associates those addresses 
with the LAN or WAN port from which they were received. 



Aging (0-65535) 



Forward Policy 



The maximum time an idle MAC address remains in the table before 
being removed. The value is in minutes. Range is 0 - 65535. Default 
is 5. 

When this parameter is set to Unknown (def), any bridge packet with 
a destination MAC address that is not in the bridge table is forwarded 
to all other ports (LAN and WAN). When set to KNOWN, the packet 
with the unknown destination MAC address is dropped and is not for- 
warded. 



Router>Config>Global>Security 

Authentication 

The method used for authenticating the PPP peer is selected here. The possible values are listed below. 

None (default) No attempt is made to authenticate the PPP peer. 

Radius The 600R will act as a RADIUS client and authenticate the PPP peer 

using the RADIUS server. The Radius server parameters must be set up 

properly for this to work. 

PPP The PPP profile is used to authenticate the PPP peer. 
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Radius Server 

The parameters for the RADIUS server are configured in this menu. The RADIUS server can be used 
for authenticating a PPP peer (if defined under Security/Authentication) and for Telnet server ses- 
sions. 

Primary Server This is the IP address of the first RADIUS server that the 

Total Access 600R should attempt to communicate with when 

authenticating a PPP peer. Default is 0.0.0.0. 
Secondary Server This is the IP address of the back-up RADIUS server that the 600R 

should attempt to communicate with when the primary server does 

not respond. Default is 0.0.0.0. 
UDP Port This is the UDP port that the 600R should use when communicating 

with the RADIUS server. The default is 1645, which is the commonly 

used port. 

Secret The RADIUS server and 600R share this text string. It is used by the 

RADIUS sever to authenticate the 600R, the RADIUS client. The 
factory default is not to use a secret. 

Retry Count (1-10) This is the number of times the 600R should send a request packet to 
the RADIUS server without a response before giving up. If the 
number of attempts to communicate with the primary server is equal 
to the retry count, the secondary server (if defined) is tried. If the 
secondary server does not respond within the retry count, the PPP 
peer (or Telnet session) is not authenticated and is dropped. The 
default is 5. 

PPP 

The PPP peer can be authenticated using three standard methods: PAP (Password Authentication Proto- 
col), CHAP (Challenge Handshake Protocol) and EAP (Extensible Authentication Protocol). The 
strength of the authentication is determined in the order EAP, CHAP, followed by PAP, where EAP is 
the strongest and PAP is the weakest. PAP is a clear-text protocol, which means it is sent over the PPP 
link in a readable format. Care must be taken not to allow highly sensitive passwords to become com- 
promised using this method. CHAP and EAP use a one-way hashing algorithm which makes it virtually 
impossible to determine the password. EAP has other capabilities which allow more flexibility than 
CHAP. The following selections are possible: 

Pap, Chap, or Eap The 600R will ask for EAP during the first PPP LCP negotiation and 
allow the PPP peer to negotiate down to CHAP or PAP. 

Chap or Eap (def) The 600R will ask for EAP during the first PPP LCP negotiation and 
allow the PPP peer to negotiate down to CHAP but not PAP. 

Eap The 600R will only allow EAP to be negotiated. If the PPP peer is not 

capable of doing EAP, then the connection will not succeed. 
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Filter Defines 

The 600R can filter packets based on certain parameters within the packet. The method used by the 
600R allows the highest flexibility for defining filters and assigning them to a PVC or PPP link. The fil- 
ters are set up in two steps: (1) defining the filter types, and (2) applying them to a list under the PVC or 
PPP configuration. This menu is used to define the individual filter defines based on packet type. 




MAC Filter Defines 

The MAC filter is applied to bridge packets only. Bridge packets which are forwarded by the bridge 
functionality of the Total Access 600R are defined here. Up to 32 MAC defines can be specified. 



Name 
Src Addr 

Src Mask 

Dest Addr 

Dest Mask 

Type 

Type Mask 



Identifies the filter entry. Default is no 
entry in name field. 

48-bit MAC source address used for com- 
parison, (hexadecimal format) Default is 
00:00:00:00:00:00. 

Bits in the MAC source address which are 

compared, (hexadecimal format) Default 

is 00:00:00:00:00:00. 

48-bit MAC destination address used for 

comparison, (hexadecimal format) Default 

is 00:00:00:00:00:00. 

Bits in the MAC destination address used 

for comparison, (hexadecimal format) 

Default is 00:00:00:00:00:00. 

16-bit type field used for comparison. 

(hexadecimal format) Default is 00:00. 

Bits in the type field used for comparison. 

(hexadecimal format) Default is 00:00. 



Pattern Filter Defines 

The pattern filter is applied to bridge packets only. That is any packet which is forwarded by the 
bridge functionality of the Total Access 600R. Up to 32 pattern defines can be specified. 



Name 
Offset 

Pattern 

Mask 



Identifies the filter entry. Default is no entry in name field. 

Offset from beginning of packet of where to start the pattern 
comparison. Default is 0. 

64 bits used for comparison, (hexadecimal format) Default is 
00:00:00:00:00:00:00:00. 

Bits in the pattern to be compared, (hexadecimal format) 
Default is 00:00:00:00:00:00:00:00. 
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IP Filter Defines 

The IP filter defines apply to any IP packet, whether it is routed or bridged. Up to 32 IP defines can 
be specified. 

Name Identifies the filter entry. Default is no entry in name field. 

Src Addr IP address compared to the source address (dotted decimal 

format) Default is 0.0.0.0. 

Src Mask Bits which are used in the source comparison, (dotted deci- 

mal format) Default is 0.0.0.0. 

Dest Address IP address compared to the destination address (dotted dec- 

imal format). Default is 0.0.0.0. 

Dest Mask Bits which are used in the destination comparison, (dotted 

decimal format) Default is 0.0.0.0. 

Src Port IP source port number used for comparison Range: 0 to 

65535. (decimal format) Default is 0. 

Src Port Comp Type of comparison that is performed. Default is none. 

= means ports equal to 

not = means port not equal to 

> means port greater than 

< means port less than 

None - means the source port is not compared 

Dest Port IP destination port number used for comparison Range: 0 

to 65535. (decimal format) Default is 0. 

Dest Port Comp Type of comparison that is performed. Default is none. 

= means ports equal to 

not = means port not equal to 

> means port greater than 

< means port less than 

None - means the destination port is not compared 

Proto Port Protocol used for comparison. Range: 0 to 255. (decimal 

format) Default is 0. 

Proto Port Comp Type of comparison that is performed. Default is none. 

= means protocols equal to 
not = means protocols not equal to 

> means protocols greater than 

< means protocols less than 

None means the protocol is not compared 
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TCP Estab Yes - only when TCP established 

No - only when TCP not established 
Ignore - ignore TCP flags (default) 

Router>Config>Ethernet 

Use the ETHERNET menu (Figure 8) to configure the Ethernet port on the 600R. 



. POIU - HypeiTerminal 



File Edit View Call pansier Help 



DM s>|g| ;ioN ffj 



TH 600R/Router/Config/Elhernet 



Global 



WAN 



Primary IP [*] 
Secondary IPs [*] 
MAC Address 00A0C8000000 



MODE: Channel Bank 



NET: down 



~Z=help 2:16 



| Connected 2:17:25 |VT100 |3600 8-N-1 [SCROLL |CAPS |NUM |Copture | Print echo 



Figure 8. Ethernet Menu 

Router>Config>Ethernet>Primary IP 

This is used to setup the IP address for the LAN on the 600R. 
IP Address 

The IP address assigned to the 600R's Ethernet port is set here. This address must be unique within the 
network. Default is 10.0.0.1. 

Subnet Mask 

This is the IP network mask that is to be applied to the 600R's Ethernet port. Default is 255.255.255.0. 
Default Gateway 

The default gateway is used by the 600R to send IP packets whose destination address is not found in 
the route table. Default is 0.0.0.0. 



RIP 

Use this menu to enable RIP on the LAN interface. 
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Method 



Mode 



Protocol 



Enables or disables RIP. Default is OFF. 

Specifies the RIP protocol. Choices are V1 (RIP version 1) or 

V2 (RIP version 2). Default is V1. 

Specifies the way the RIP protocol sends out its advertise- 
ments. Choices are given below. 



None 



All routes in the router table are advertised with no 
modification of the metrics. 

Only routes not learned from this circuit are adver- 
tised. 

All routes are advertised, but the routes learned 
from this port are "poisoned" with an infinite met- 
ric. 



Split Horizon 



Poison Reverse 



(def) 



Direction 



Allows the direction at which RIP advertisements are sent and 



TX Only 



TX and RX (DEF) 



RX Only 



listened to be specified. 

RIP advertisements are periodically transmitted and 
are listened to on this port. 

RIP advertisements are periodically transmitted but 
are not listened to on this port. 
RIP advertisements are listened to on this port, but 
are not transmitted on this port. 



V2 Secret 



Enter the secret used by RIP version 2 here. 



Proxy ARP 

This feature allows the network portion of a group of addresses to be shared among several physical 
network segments. The ARP protocol provides a way for devices to create a mapping between physical 
addresses and logical IP addresses. Proxy ARP makes use of this mapping feature by instructing a 
router to answer ARP requests as a "proxy" for the IP addresses behind one of its ports. The device 
which sent the ARP request will then correctly assume that it can reach the requested IP address by 
sending packets to the physical address that was returned. This technique effectively hides the fact that 
a network has been (further) subnetted. If this option is set to YES, when an ARP request is received on 
the Ethernet port the address is looked up in the IP routing table. If the forwarding port is not on the 
Ethernet port and the route is not the default route, the Total Access 600R will answer the request with 
its own hardware address. Default is YES. 

Router>Config>Ethernet>Secondary IPs 

This allows the Total Access 600R to specify additional IP addresses and networks on its Ethernet. The max- 
imum number of entries is 10. 

IP Address 

This is the second IP address the 600R will respond to on the Ethernet. Default is 0.0.0.0. 
Subnet Mask 

This is the mask for the network. Default is 255.255.255.0. 



Router>Config>Ethernet>MAC Address 

This is a read-only field which displays the unique MAC address programmed at ADTRAN. 
ROUTER>CONFIG>WAN 

Use the WAN menu (Figure 9) to configure WAN settings on the 600R. 
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1 i POIU 


HiipeiT erminal 


HI3Q 


File Edit 


View Call Transfer Help 




a\&\ 


®|s| no|a| if| 





Tfl 600R/Router/Confia/WPN 



Global 
Ethernet 



L2 Protocol Frame Relay 
PPP Profile [-] 
Frame Relay [*] 



MODE: Channel Bank 



NET: down 



~Z=help 2:22. 



| Connected 2:23:32 |VT100 |9B00 B-N-l |SCR0LL |CAPS |NUM | Capture | Print echo 



Figure 9. WAN Menu 



Router>Config>WAN>L2 Protocol 

Displays the current L2 protocol. Choices are PPP, Frame Relay, and Auto Detect. Default is Frame 
Relay. 

ROUTER>CONFIG>WAN>PPP PROFILE 

The Total Access 600R uses the WAN/PPP profile to specify the profile used when connected using PPP. 
Authentication 

The authentication menu contains the required parameters for the authentication of the PPP peer and for 
being authenticated by the PPP peer. Authentication is applied between the Total Access 600R and the 
PPP peer as follows: 

TX Method 

This parameter specifies how the Total Access 600R is to be authenticated by the PPP peer. There are 
four possible selections. Default is PAP, CHAP, or EAP 

None The connection will not allow the PPP peer to authenticate it. 

Pap, Chap, or Eap The Total Access 600R will ask for EAP during the first PPP LCP 
negotiation and allow the PPP peer to negotiate down to CHAP or 
PAP. 

Chap or Eap The Total Access 600R will ask for EAP during the first PPP LCP 

negotiation and allow the PPP peer to negotiate down to CHAP but 
not PAP. 

Eap The Total Access 600R will only allow EAP to be negotiated. If the 

PPP peer is not capable of doing EAP, then the connection will not 
succeed. 
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TX USERNAME 

This is the username that is used when being authenticated by the PPP peer. You can enter up to 3 1 
characters in this field. Default is no entry in the TX username field. 

TX Password 

This is the password or secret that is used when being authenticated by the PPP peer. You can enter 
up to 15 characters in this field. Default is no password. 

RX Username 

This is the username used to authenticate the PPP peer. You can enter up to 3 1 characters in this field. 
Default is no entry in the RX username field. 

RX Password 

This is the password or secret that is used to authenticate the PPP peer. You can enter up to 15 charac- 
ters in this field. Default is no password. 

IP 

The IP menu contains the parameters for exchanging IP data with the PPP peer. 
Mode 

Setting to On (def) will permit this connection profile to negotiate PPP IPCP with the PPP 
peer for routing of IP packets. Choices are OFF and On. 

NAT 

The Total Access 600R can perform Network Address Translation. This feature is most widely used 
when connecting to the Internet. The Ethernet network can consist of private network numbers. 
When this profile is connected, all IP addresses on the Ethernet side are translated into the one real IP 
address negotiated with the PPP peer (ISP). Multiple stations on the Ethernet side can access the 
Internet simultaneously. 

Port Translation By enabling port translation, IP packets are modified as they pass 
through this interface. During transmission, private addresses are 
translated into a single public (NAPT) IP address. Incoming 
packets are translated from the public to private address based on 
the protocol port numbers. Once enabled, you must set up NAT 
for use. Default is DISABLED. When disabled, the unit will route 
across the connection normally. 
Public IP Address This option is only available when NAT Port Translation is en- 
Mode abled. The port translation requires at least a single real IP ad- 

dress for translating. This value can use the IP assigned to the 
interface (or assigned via layer 2 protocol like PPP), obtained us- 
ing DHCP client, or statically specified on this menu. If the ad- 
dress cannot be learned, then it must be specified in order for the 
translation to work. Choices are INTERFACE, SPECIFIED, and 

DHCP Client. Default is Interface. 

Public IP Address This is the specified address used for NAT. This option is only 
available when NAT Port Translation is enabled and the 
Public IP Address Mode is set to Specified. Default is 0.0.0.0. 

Translation Table This option is only available when NAT Port Translation is en- 
abled. Add translation entries to "fine tune" special protocols or 
specify private addresses. 
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Public 

Address Mode 



Public 
Address 

Protocol 
Mode 



Protocol 



Protocol Type 



Public Port 
Mode 



Public Port 



Public Port 
Type 



This option is only available when NAT Port Trans- 
lation is enabled. The public IP address used for this 
translation entry can be the NAPT IP address assigned 
to the link or can be specified. You specify an address 
to direct packets with certain protocols to different 
servers. Choices are NAPT ADDR and SPECIFIED. 
Default is NAPT ADDR. 

This option is only available when NAT Port Trans- 
lation is enabled and the Public Address Mode is set 
to Specified. Default is 0.0.0.0. 
This option is only available when NAT Port Trans- 
lation is enabled. The upper layer protocol that is to 
be monitored for translation. For TCP and UDP, a port 
number must also be specified. Choices are TCP; 
UDP; ICMP; Any (TCP, UDP, OR ICMP); All; 
Specified; and None. Default is None. 
This option is only available when NAT Port Trans- 
lation is enabled and Protocol Mode is set to SPECI- 
FIED. Default is 0 (decimal). 

This option is only available when NAT Port Trans- 
lation is enabled and Protocol Mode is set to Speci- 
fied. This is a read-only field. 
This option is only available when NAT Port Trans- 
lation is enabled and Protocol Mode is set to either 
TCP or UDP. 

The public destination port associated with this entry 
can be specified to add more control over certain types 
of traffic. Choices are SPECIFIED and ANY PORT. The 
default, ANY PORT, covers all port types. 
This option is only available when NAT Port Trans- 
lation is enabled and Public Port Mode is set to 
SPECIFIED. However, it will not be available if Proto- 
col Mode is set to ICMP; Any (TCP, UDP, OR 
ICMP); All; Specified; or None. Default is 0 (dec- 
imal). 

This option is only available when NAT Port Trans- 
lation is enabled and Public Port Mode is set to 
SPECIFIED. However, it will not be available if Proto- 
col Mode is set to ICMP; Any (TCP, UDP, OR 
ICMP); All; SPECIFIED; or NONE. This is a read- 
only field. 
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Private 

Address 

Mode 



Private 
Address 

Private 
Port Mode 



Private 
Port 



Translate 
Body 



NAT View 

Priv Addr 



Pub Addr 

Serv Addr 
Proto 
Priv Port 
Spoof Port 



This option is only available when NAT Port Trans- 
lation is enabled. The private IP address can be speci- 
fied to steer certain protocols and ports to specific 
servers in the private network. Likewise, internal hosts 
can be steered to certain servers on the public network. 
A new request from the public network matching this 
entry's public parameters will be dropped if this mode 
is set to Any Internal. Choices are SPECIFIED and 
Any Internal. Default is Any Internal. 
This option is only available when NAT Port Trans- 
lation is enabled and Private Address Mode is set to 
Specified. Default is 0.0.0.0. 
This option is only available when NAT Port Trans- 
lation is enabled. However, it will not be available if 
Protocol Mode is set to ICMP; Any (TCP, UDP, 
or ICMP); All; Specified or None. 

The private destination port associated with this entry 
can be specified to add more control over certain types 
of traffic. Leave as ANY PORT to cover all port types. 
Choices are ANY PORT and SPECIFIED. Default is 

Any Port. 

This option is only available when NAT Port Trans- 
lation is enabled and the Private Port Mode is set to 
SPECIFIED. However, it will not be available if Proto- 
col Mode is set to ICMP; Any (TCP, UDP, OR 
ICMP); All; Specified or None. Default is 0 (deci- 
mal). 

This option is only available when NAT Port Trans- 
lation is enabled. When set to Yes, the application 
payload in the packet is scanned for occurrences of the 
private/public IP address in binary or ASCII form. Set 
this to No (default) for applications where this will 
cause problems. 
Shows the protocols that are actively being translated. 
This option is only available when NAT Port Translation is en- 
abled. This shows the private address of the host that the entry is 
used for. 

This option is only available when NAT Port Translation is en- 
abled. This shows the public address this entry is using for its 
NAPT. 

This option is only available when NAT Port Translation is en- 
abled. This is the destination of the packet. 
This option is only available when NAT Port Translation is en- 
abled. This shows the protocol used (TCP, UDP, ICMP, etc.). 
This option is only available when NAT Port Translation is en- 
abled. This is the private port used for the entry. 
This option is only available when NAT Port Translation is en- 
abled. If the same private port is already used in the table, it will 
spoof a different port for the entry. 
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Time 



In Cnt 



Out Cnt 



NAPT Address 



Entry Count 



Entry Overflow 
Count 



Server Port This option is only available when NAT Port Translation is 

enabled. This is the port used on the public side. 
This option is only available when NAT Port Translation is 
enabled. This is the time since the entry was last used. 
This option is only available when NAT Port Translation is 
enabled. This is the number of packets that came in. 
This option is only available when NAT Port Translation is 
enabled. This is the number of packets sent out. 
This option is only available when NAT Port Translation is 
enabled. Represents the public address that is being used as the 
NAPT address. Read-only. 

This option is only available when NAT Port Translation is 

enabled. The number of entries in the NAT table. Maximum is 
1500. 

This option is only available when NAT Port Translation is 

enabled. A count of the dropped entries due to entry count being 
1500 or greater; i.e., the NAT table is full. 



Route 

The IP parameters are configured in this menu. For unnumbered interfaces, the Total Access 600R 
will automatically discover the PPP peer's networks using PPP IPCP and/or RIP. 



Far-End IP/NET 



Netmask 



Static Route 



Private 



Hops (1-16) 



Force IP 



Local IP 



The PPP peer's IP address or network can be set here, if known. 
Leaving this at 0.0.0.0 means that the Total Access 600R will de- 
termine the PPP peer's IP and network (if unnumbered) using 
the PPP IPCP. Default is 0.0.0.0. 

This network mask is applied to the IP/NET address for 
determining the PPP peer's network. If left as 0.0.0.0, a 
standard network mask is used. Default is 0.0.0.0. 

Selecting YES will add a static route to the remote peer to 
the route table. Default is YES. 

Selecting YES will prevent this route from being adver- 
tised. Default is No. 

This value is the metric or number of hops that RIP will 
use in advertising the static route. The range is 1 to 16, 
where 1 is the default. The value 16 is considered an infi- 
nite distance in RIP and is, in effect, poisoning the route. 
When set to YES, the 600R will force the PPP peer to use 
the IP address in the IP/Net for this profile as its WAN IP 
address. Normally this is set in the No position. Default is 
NO. 

This is the IP address that is assigned to the PPP link when 
using numbered links. By default, no address is assigned 
and the PPP link is unnumbered. Default is 0.0.0.0. 



RIP 

Use this menu to enable RIP on the WAN interface. 
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Mode 
Protocol 



Method 



None 

Split Horizon 
(def) 

Poison Reverse 



Direction 



TX and RX (DEF) 
TX Only 



RX Only 
Triggered 

Retain 



Enables or disables RIP. Default is OFF. 

Specifies the RIP protocol. Choices are V1 (RIP version 1) 

or V2 (RIP version 2). The default is V1 . 

Specifies the way the RIP protocol sends out its advertise- 
ments. Choices are given below. 

All routes in the router table are advertised with no 

modification of the metrics. 

Only routes not learned from this circuit are adver- 
tised. 

All routes are advertised, but the routes learned 
from this port are "poisoned" with an infinite met- 
ric. 

Allows the direction at which RIP advertisements are sent 
and listened to be specified. 

RIP advertisements are periodically transmitted 

and are listened to on this port. 

RIP advertisements are periodically transmitted 

but are not listened to on this port. 

RIP advertisements are not transmitted on this 

port, but are listened. 
When set to YES, only IP RIP updates are sent when the 
routing table has changed and learned routes are not "aged." 
When set to No (def), updates are sent periodically. 
When this Connection List entry is disconnected and this pa- 
rameter is set to YES, all routes learned from this WAN con- 
nection are retained and their routing interface is set to idle. 
This permits dial-on-demand to occur using this profile for 
any IP network that might have been advertised by the par- 
ticular PPP peer. The idle routes can be flushed or "zombies" 
from the routing table if a manual hangup is performed when 
this WAN connection is not active. When this Connection 
List entry is disconnected and this parameter is set to No 
(def), routes learned from this session are "zombies" and are 
not retained. 



Bridge 

The Bridge menu contains the parameters needed for exchanging bridged packets with the PPP peer. 
Mode 

When set to On, the Total Access 600R will attempt to negotiate PPP BCP with the PPP peer. Bridg- 
ing can be used even in route mode only if the PPP peer cannot support certain PPP protocols for that 
particular routing protocol. Default is Off. 

PPP 

The Total Access 600R supports the IETF standards for the Point-to-Point Protocol. The PPP state 
machine running in the 600R can be fine-tuned to support many applications that can be employed. The 
configurable items under this menu can be changed from their default values for special cases. 
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VJ Compression 

When this item is set to On, the Total Access 600R will perform TCP/IP header compression known 
as Van Jacobson Compression to the PPP peer. Default is OFF. 

Max Config 

This value is the number of unanswered configuration requests that should be transmitted before giv- 
ing up on a connection. Choices are 5, 10, 15, and 20. Default is 20. 

Max Timer (sec) 

This value is the number of seconds to wait between unanswered configuration requests. Choices are 
1,2,3, 5, and 1 0. Default is 3. 

Max Failure 

Due to the nature of PPP, configuration options may not be agreed upon between two PPP peers. This 
value is the number of configuration-NAKS that should occur before an option is configuration- 
rejected. This allows a connection to succeed that might otherwise fail. Choices are 5, 10, 15, and 
20. Default is 5. 



Filters 

The 600R can block packets in and out of a WAN port by use of the filters. They are set up in two steps: 
1) define the types of packets that would be of interest in the CONFIGURATION/SECURITY/FlLTER 
DEFINES menu, and 2) set up the filter type and combination of defines that will cause a packet block. 

WAN-to-LAN (In) 

The packets which come into the Total Access 600R can be filtered in three ways: 

Disable (def) Turns off packet input filtering. No incoming packets are blocked. 

Block All All incoming packets from the WAN are blocked except as defined 

in the FlLTERS/lN EXCEPTIONS list. 

Forward All All incoming packets from the WAN are not blocked except as de- 

fined in the FlLTERS/lN EXCEPTIONS list. 



In Exceptions 

This is a list of up to 32 filter entries which can be combined using the operations field. The opera- 
tions are performed in the order they appear on the list. 

Active Turns this entry active when set to YES. Default is No. 

Type Selects the filter define list to reference (default is MAC): 

MAC from the CONFIGURATION/SECURITY/FlLTER DEFINES/MAC 

Filter Defines list. 

Pattern from the Configuration/Security/Filter Defines/Pat- 

tern Filter Defines list. 

IP from the Configuration/Security/Filter Defines/IP Fil- 

ter Defines list. 

Filter List Name Selects between filters defined in the list. Default is no entry in 

filter list name. 

Next Oper The next operation to use to combine with the next filter in the 

list (default is END): 
END the last filter to combination. 

AND logically AND this filter with the next filter in the list. 

OR logically OR this filter with the next filter in the list. 
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LAN-to-WAN (Out) 

The packets which come out toward the WAN from the 600R can be filtered in three ways: 

Disable (Def) Turns off packet output filtering. No outgoing packets are blocked. 

Block All All outgoing packets to the WAN are blocked except as defined in 

the Filters/Out Exceptions list. 

Forward All All outgoing packets to the WAN are not blocked except as de- 

fined in the FlLTERS/OUT EXCEPTIONS list. 

Out Exceptions 

This is a list of up to 32 filter entries. The setup is exactly the same as the FlLTER/lN EXCEPTIONS 
list. 

Router>Config>WAN>Frame Relay 

Frame Relay is a connection-oriented service requiring circuits to be configured by your carrier to 
establish a physical link between two or more locations. Multiple virtual circuits (which appear as vir- 
tual point-to-point links) can be run through the same physical connection. 

There are two types of virtual circuits supported in Frame Relay: Permanent Virtual Circuits (PVC) and 
Switched Virtual Circuit (SVC). PVCs are like dedicated point-to-point private lines. Since the physical 
connection is always there in the form of a leased line, call setup and tear down is done by a carrier via 
a network management system. SVCs require setup and tear down and are generally not available from 
Frame Relay carriers. Virtually all Frame Relay communications are implemented using PVCs. The 
Total Access 600R supports PVCs only. 

A number called the Data Link Connection Identifier (DLCI) identifies each virtual circuit within a 
shared physical channel. 

Maintenance Protocol 

The Frame Relay maintenance protocol is used on the WAN port. The maintenance protocol is used to 
send link status and virtual circuit information between Frame Relay switches and other devices (such 
as routers) that communicate with them. Possible choices are listed below. 

Annex D (def) This is an ANSI standard and is the most commonly used standard 

in the US. 

Annex A This is the CCITT European standard. 

LMI This was developed by a vendor consortium and is also known as 

the "consortium" management interface specification. It is still 
used by some carriers in the U.S. 

Static This should be selected when there is no Frame Relay switch in the 

circuit. The DLCIs are assigned in the DLCI Mapping and must be 
the same for the device it will communicate with. 

Polling Frequency (5-30) 

This parameter is the interval that the Total Access 600R polls the Frame Relay switch using the main- 
tenance protocol selected above. The Total Access 600R is required to poll the Frame Relay switch peri- 
odically to determine whether the link is active. The value is in seconds and ranges from 5 to 30 seconds 
with a default of 10 seconds. 
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DLCI Mapping 

This menu allows each DLCI to be mapped to a particular Frame Relay maintenance protocol. Each 
protocol parameter can be individually configured for each DLCI. By factory default, the DLCI map is 
empty. 

When empty and a maintenance protocol other than static is used, the Total Access 600R will poll the 
switch to determine which DLCIs are active. These active DLCIs will attempt to determine the IP 
addresses on the other end of the virtual circuit using Inverse ARP (IARP). If there is a response, the 
network learned will be added to the router tables and the virtual circuit will be treated as an unnum- 
bered interface. Bridge connections are made using bridge group 1 . 

When more than one DLCI mapping is listed, the 600R will try to match the DLCIs learned from the 
Frame Relay switch with the DLCI values in the map. If there is a match, the protocols specified in the 
map are used. However, if an active DLCI is not in the list, it looks for an entry that has 0 in the DLCI 
field. This entry is considered the default entry to use when no match occurs. If this default entry is not 
present, the Total Access 600R falls back to using IARP (as discussed in the previous paragraph) to 
determine the protocols to use with that particular virtual circuit. If a static maintenance protocol is 
used, at least one DLCI mapping must be specified. 



To insert a new profile, press the I key when over the Num column. A new inserted profile will 
always be set up with the default parameters. To copy parameters from an old profile to this newly 
inserted profile, use the copy ( C) and paste (P) keys. Entire configuration trees can be copied with 
this method. 




To delete an unused profile, use the D key when the cursor is over the number in the Num column. 
Once deleted, the profile is gone permanently as soon as the DLCI Mapping is saved. Items may be 
deleted when DEL appears below the status bar. 



Active 

When this parameter is set to Yes (def), the mapping is used to determine the protocols used. If set to 
No, the Total Access 600R will ignore the virtual circuit with this DLCI. 

DLCI 

This is the DLCI associated with this virtual circuit. This value can range from 16 to 1007. Default is 
0. 

IP Map 

This menu represents the IP protocol mapping that is to take place for this DLCI. 

Active When this is set to Yes (def), the Total Access 600R will 

attempt to route IP packets for this DLCI. A setting of No 
means that no IP traffic will be routed. 
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IARP When this is set to Yes, the Total Access 600R will send In- 

verse ARP packets to determine the IP address on the other 
end of the virtual circuit. If the IARP is responded to, a route 
is placed in the IP route table. A setting of No (default) 
means that the route address is to be assigned statically using 
the IP MAP/FAR-END IP ADDRESS parameter. The Total 
Access 600R will always respond to Inverse ARP requests. 

Far-End IP Address This is the IP address of the device on the other end of the vir- 
tual circuit. When this DLCI becomes active, the Total Ac- 
cess 600R will add a route in the IP routing table. Default is 
0.0.0.0. 

IP Netmask The IP network mask to apply to the FAR-END IP ADDRESS 

and LINK IP ADDRESS is specified here. Default is 0.0.0.0. 

Local IP Address The virtual circuit may require an IP address to be specified 

at this DLCI interface. This is called a numbered interface. 
This address is used by the Total Access 600R to respond to 
Inverse ARP requests. If this IP address is left as 0.0.0.0, the 
link is treated as unnumbered and the 600R responds to the 
Inverse ARP with its Ethernet IP address. Default is 0.0.0.0. 



NAT 

The Total Access 600R can perform Network Address Translation. This feature is most widely used 
when connecting to the Internet. The Ethernet network can consist of private network numbers. 
When this profile is connected, all IP addresses on the Ethernet side are translated into the one real IP 
address. Multiple stations on the Ethernet side can access the Internet simultaneously. 



Port Translation 



Public IP Address 
Mode 



Public IP Address 



By enabling port translation, IP packets are modified as they pass 
through this interface. During transmission, private addresses are 
translated into a single public (NAPT) IP address. Incoming 
packets are translated from the public to private address based on 
the protocol port numbers. Once enabled, you must set up NAT 
for use. Default is DISABLED. When disabled, the unit will route 
across the connection normally. 

This option is only available when NAT Port Translation is en- 
abled. The port translation requires at least a single real IP ad- 
dress for translating. This value can use the IP assigned to the 
interface (or assigned via layer 2 protocol like PPP), obtained 
using DHCP client, or statically specified on this menu. If the ad- 
dress cannot be learned, then it must be specified in order for the 
translation to work. Choices are INTERFACE, SPECIFIED, and 

DHCP Client. Default is Interface. 

This is the specified address used for the NAT. This option is only 
available when NAT Port Translation is enabled and the Public 
IP Address Mode is set to Specified. Default is 0.0.0.0. 
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Translation Table 



Public 

Address 

Mode 



Public 
Address 

Protocol 
Mode 



Protocol 



Protocol 
Type 

Public Port 
Mode 



Public Port 



Public Port 
Type 



This option is only available when NAT Port Translation is en- 
abled. Add translation entries to "fine tune" special protocols or 
specify private addresses. 

This option is only available when NAT Port Transla- 
tion is enabled. The public IP address used for this 
translation entry can be the NAPT IP address assigned 
to the link or can be specified. You specify an address 
to direct packets with certain protocols to different 
servers. Choices are NAPT ADDR and SPECIFIED. 
Default is NAPT ADDR. 

This option is only available when NAT Port Transla- 
tion is enabled and the Public Address Mode is set to 
Specified. Default is 0.0.0.0. 

This option is only available when NAT Port Transla- 
tion is enabled. The upper layer protocol that is to be 
monitored for translation. For TCP and UDP, a port 
number must also be specified. Choices are TCP; 
UDP; ICMP; Any (TCP, UDP, OR ICMP); All; 
Specified; and None. Default is None. 
This option is only available when NAT Port Transla- 
tion is enabled and Protocol Mode is set to Speci- 
fied. Default is 0 (decimal). 

This option is only available when NAT Port Transla- 
tion is enabled and Protocol Mode is set to SPECI- 
FIED. Read-only. 

This option is only available when NAT Port Transla- 
tion is enabled and Protocol Mode is set to either 
TCP or UDP. 

The public destination port associated with this entry 
can be specified to add more control over certain types 
of traffic. Choices are SPECIFIED and ANY PORT. The 
default, ANY PORT, covers all port types. 
This option is only available when NAT Port Transla- 
tion is enabled and Public Port Mode is set to SPECI- 
FIED. However, it will not be available if Protocol 
Mode is set to ICMP; Any (TCP, UDP, OR ICMP); 
ALL; SPECIFIED; or None. Default is 0 (decimal). 
This option is only available when NAT Port Transla- 
tion is enabled and Public Port Mode is set to SPECI- 
FIED. However, it will not be available if Protocol 
Mode is set to ICMP; Any (TCP, UDP, OR ICMP); 
All; Specified; or None. Read-only. 
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Private 

Address 

Mode 



Private 
Address 

Private 
Port Mode 



Private 
Port 



Translate 
Body 



NAT View 

Priv Addr 



Pub Addr 

Serv Addr 
Proto 
Priv Port 
Spoof Port 



This option is only available when NAT Port Transla- 
tion is enabled. The private IP address can be specified 
to steer certain protocols and ports to specific servers in 
the private network. Likewise, internal hosts can be 
steered to certain servers on the public network. A new 
request from the public network matching this entry's 
public parameters will be dropped if this mode is set to 
Any Internal. Choices are SPECIFIED and ANY 
Internal. Default is Any Internal. 
This option is only available when NAT Port Transla- 
tion is enabled and Private Address Mode is set to 
Specified. Default is 0.0.0.0. 

This option is only available when NAT Port Transla- 
tion is enabled. However, it will not be available if 
Protocol Mode is set to ICMP; Any (TCP, UDP, OR 
ICMP); All; Specified; or None. 

The private destination port associated with this entry 
can be specified to add more control over certain types 
of traffic. Leave as ANY PORT to cover all port types. 
Choices are ANY PORT and SPECIFIED. Default is ANY 

Port. 

This option is only available when NAT Port Transla- 
tion is enabled and Private Port Mode is set to SPEC- 
IFIED. However, it will not be available if Protocol 
Mode is set to ICMP; Any (TCP, UDP, OR ICMP); 
ALL; SPECIFIED; or None. Default is 0 (decimal). 
This option is only available when NAT Port Transla- 
tion is enabled. When set to Yes, the application pay- 
load in the packet is scanned for occurrences of the 
private/public IP address in binary or ASCII form. Set 
this to No (default) for applications where this will 
cause problems. 
Shows the protocols that are actively being translated. 
This option is only available when NAT Port Translation is en- 
abled. This shows the private address of the host that the entry is 
used for. 

This option is only available when NAT Port Translation is en- 
abled. This shows the public address this entry is using for its 
NAPT. 

This option is only available when NAT Port Translation is en- 
abled. This is the destination of the packet. 
This option is only available when NAT Port Translation is en- 
abled. This shows the protocol used (TCP, UDP, ICMP, etc.). 
This option is only available when NAT Port Translation is en- 
abled. This is the private port used for the entry. 
This option is only available when NAT Port Translation is en- 
abled. If the same private port is already used in the table, it will 
spoof a different port for the entry. 
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Time 



In Cnt 



Out Cnt 



NAPT Address 



Entry Count 



Entry Overflow 
Count 



Server Port This option is only available when NAT Port Translation is 

enabled. This is the port used on the public side. 
This option is only available when NAT Port Translation is 
enabled. This is the time since the entry was last used. 
This option is only available when NAT Port Translation is 
enabled. This is the number of packets that came in. 
This option is only available when NAT Port Translation is 
enabled. This is the number of packets sent out. 
This option is only available when NAT Port Translation is 
enabled. Represents the public address that is being used as the 
NAPT address. Read-only. 

This option is only available when NAT Port Translation is 

enabled. The number of entries in the NAT table. Maximum is 
1500. 

This option is only available when NAT Port Translation is 

enabled. A count of the dropped entries due to entry count being 
1500 or greater; i.e., the NAT table is full. 



RIP 

Version The RIP protocol can be specified per DLCI. The possible 

selections are Off (default) (meaning no RIP packets are lis- 
tened to or sent), V1 (RIP version 1) or V2 (which is RIP 
version 2). 

Method This specifies the way the RIP protocol sends out its adver- 

tisements. 

None (def) All routes in the router table are advertised out this virtual 

circuit with no modification of the metrics. 

Split Horizon Only routes not learned from this particular virtual circuit 
are advertised. 

Poison Reverse All routes are advertised, but the routes learned from this 
port are "poisoned" with an infinite metric. 
Direction This parameter specifies the direction at which RIP adver- 

tisements are sent and listened. 

Tx AND Rx (def) RIP advertisements are periodically transmitted and are lis- 
tened to on this virtual circuit. 

Tx Only RIP advertisements are periodically transmitted but are not 

listened to on this virtual circuit. 

Rx Only RIP is not transmitted on this virtual circuit but they are lis- 

tened to. 

Bridge Map 

This menu is used to permit bridging of packets over this DLCI. Each DLCI or virtual circuit must be 
assigned a bridge group. The bridge group treats all virtual circuits as one circuit. Bridge packets des- 
tined to be transmitted out a particular bridge group are copied and transmitted individually out each 
DLCI in the bridge group. However, incoming bridge packets received from one DLCI are not retrans- 
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mitted out the other DLCIs in the same bridge group. Any device in the bridge group must transmit to 
each DLCI. This requires a fully meshed circuit, meaning each device has a virtual circuit to each other. 

Active 

When this is set to Yes, the 600R will bridge packets to and from this DLCI. Bridge packets are any 
packets that are not IP packets except when the router is turned off, in which case that particular 
router's protocol packets are bridged. A setting of No (def) means that no bridging will occur. 

Bridge Group 

The bridge group that this DLCI is part of is specified here as Group 1 (def) or Group 2. These 
groups correspond to the spanning tree protocols Bridge Group 1 and Bridge Group 2. 

Filter 

The 600R can block packets in and out of a PVC port by use of the filters. They are set up in two steps: 
1) define the types of packets that would be of interest in the CONFIGURATION/SECURITY/FlLTER 
DEFINES menu, and 2) set up the filter type and combination of defines that will cause a packet block. 

In from PVC 

The packets which come into the Total Access 600R via this PVC can be filtered in three ways: 

Disable (Def) Turns off packet input filtering. No incoming packets from this 
PVC are blocked. 

Block All All incoming packets from this PVC are blocked except as defined 

in the FlLTERS/lN EXCEPTIONS list. 

Forward All All incoming packets from this PVC are not blocked except as de- 
fined in the FlLTERS/lN EXCEPTIONS list. 



In Exceptions 

This is a list of up to 32 filter entries which can be combined using the operations field. The opera- 
tions are performed in the order they appear on the list. 



Active 
Type 

MAC (Def) 

Pattern 

IP 

Filter List Name 
Next Oper 

END (Def) 

AND 

OR 



Turns this entry active when set to Yes. Default is No. 
Selects the filter define list to reference. 

from the CONFIGURATION/SECURITY/FlLTER DEFINES/MAC 

Filter Defines list. 

from the CONFIGURATION/SECURITY/FlLTER DEFINES/PAT- 

tern Filter Defines list. 

from the Configuration/Security/Filter Defines/IP Fil- 
ter Defines list. 

Selects between filters defined in the list. 

The next operation to use to combine with the next filter in the 
list: 

the last filter to combination. 

logically AND this filter with the next filter in the list 
logically OR this filter with the next filter in the list. 
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Out to PVC 

The packets which transmit out this PVC from the Total Access 600R can be filtered in three ways: 

Disable (Def) Turns off packet output filtering. No outgoing packets to this 

PVC are blocked. 

Block All All outgoing packets to this PVC are blocked except as defined 

in the FlLTERS/OUT EXCEPTIONS list. 

Forward All All outgoing packets to this PVC are not blocked except as de- 

fined in the FlLTERS/OUT EXCEPTIONS list. 



Out Exceptions 

This is a list of up to 32 filter entries. The setup is exactly the same as the FlLTER/lN EXCEPTIONS 
list. 



Maintenance DLCI 

The Total Access 600R can be configured from the WAN without having to preset a DLCI mapping or 
IP address. This value is the DLCI number used to open an IP session by the Total Access 600R. Any IP 
packet arriving from the PVC is assumed to be for the Total Access 600R's IP stack. The destination 
address in the packet is assigned as the PVC's local IP address. The source address is used to add a host 
route in the routing table. The default is 901, but any legal DLCI number can be used. 

BECN Timeout (msec) 

This value is expressed in milliseconds and represents the amount of time the Total Access 600R will 
stop transmitting over a PVC which received a packet with the BECN bit set. The default is 1.5 seconds. 



Router>Status 

Use the ROUTER/STATUS menu to view and set the parameters shown in Figure 10. The ROUTER/STATUS screens 
give the user useful information for debugging the current routes in the 600R. 



*»P0IU 


HypeiT erminal 




File Edit 


View Call Transfer Help 




D|tf| 


s|S| sols rffj 





Tfl 600R/Router/StatLis 



Conf i 



Logs 



RRP Cache 
Bridge Table 
IP Routes 
URN Stats 
LRN Stats 
IP Stats 



MODE: Channel Bank 



NET: down 



~Z=help 0:38 



| Connected 3:22:51 VT100 |S600 8-N-1 SCROLL |CAPS |NUM |Capture | Print echo 



Figure 10. Router/Status Menu 
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Router>Status>Session 

This menu contains the current status of all sessions and spanning tree ports. 

Router>Status>Session>PPP Session 

This menu reflects the results of PPP negotiations, user name, time connected, and data rates for the ses- 
sion. 



LCP 


Link Control Protocol. Reflects LCP layer active 


BCP 


Shows UP if PPP Bridge Control Protocol has negotiated successfully 


IPCP 


Shows UP if PPP IP Control Protocol has negotiated successfully 


Up Time 


Displays how long the PPP session has been connected 


Tx Pkts 


Number of packets transmitted 


Rx Pkts 


Number of packets received 


Tx Bytes 


Number of bytes transmitted 


Rx Bytes 


Number of bytes received 



Router>Status>Session>Frame Relay 



Port 

Shows Frame Relay statistics for the WAN port. 



Port Index 

Signal State 

Tx Frames 

Rx Frames 

Tx Bytes 

Rx Bytes 

Signal Tx Frames 

Signal Rx Frames 

Drop Unknown DLCI 

Drop Invalid DLCI 



Integer used for identifying DLCIs on an interface. A single 
DLCI will always be port index 0. Subsequent DLCIs will 
have incrementing port index values. 

Displays "up" when the Total Access 600R is communicating 
with the Frame Relay switch; otherwise displays "down" 

Total packets transmitted out 

Total packets received from port 

Total bytes transmitted out port 

Total bytes received from port 

Number of Frame Relay signaling packets transmitted out port 

Number of Frame Relay signaling packets received from port 

Number of frames received that were not associated with any 
known PVC 

Number of frames received that had illegal DLCIs 
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PVC's 

The status of all virtual circuits 

DLCI 
State 



Tx Frames 

Rx Frames 

Tx Bytes 

Rx Bytes 

IP SubIfc 

Bridge Group 

Tx Throughput 

Rx Throughput 

De Count 

Cr Count 

Becn Count 

Fecn Count 

Unknown Frame 
Rx 



is displayed here. 

The DLCI that is associated with this virtual circuit. 
The state of the virtual circuit: 

Inactive - means the circuit exists but has been deactivated by the 
Frame Relay switch. 

Exists - means the circuit exists at this point and should be activat- 
ed soon. 

Active - means the circuit is fully active. 

Off - means the circuit has been turned off by the DLCI mapping 
active selection. 

Number of Frame Relay packets that have been transmitted via 
this DLCI. 

Number of Frame Relay packets that have been received via this 
DLCI. 

Number of Frame Relay bytes that have been transmitted via this 
DLCI. 

Number of Frame Relay bytes that have been received via this DL- 
CI. 

The IP router port assigned for this DLCI. Possible ports are frO, 
frl, ... , fr9. None means that this DLCI is not used for routing IP. 

The bridge group that this DLCI belongs to (Group 1 or Group 2). 
None means that this DLCI is not used for bridging. 

Current transmit rate of this DLCI 

Current receive rate of this DLCI 

Number of packets received on this DLCI with the DE bit set 

Number of packets received on this DLCI with the CR bit set 

Number of packets received on this DLCI with the Becn bit set 

Number of packets received on this DLCI with the Fecn bit set 

Status indicating the number of frames that have been received 
that the Total Access 600R does not know where to route. The 
router does not know where to send these frames. 



Router>Status>ARP Cache 

This lists the contents of the Total Access 600R's ARP table. All resolved cache entries time out after 20 minutes. Un- 
resolved entries time out in 3 minutes. The ARP cache can be cleared by pressing "f" while on the menu or by pressing 
"d" on the individual number for that entry. 

Router>Status>ARP Cache>IP Address 

IP address used for resolving MAC address 



Router>Status>ARP Cache>MAC Address 

Ethernet address resolved (0=no resolution) 
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Router>Status>ARP Cache>Time 

Minutes since entry was first entered 

Router>Status>Bridge Table 

This lists the contents of the Total Access 600R's bridge table. 

Router>Status>Bridge Table>MAC Address 

Ethernet address for device learned 

Router>Status>Bridge Table>Port 

This shows whether the packet is forwarded across the link (LAN or WAN). This populates after receiving a 
packet from a device, either from the Ethernet or the WAN connection. 

Router>Status>Bridge Table>TTL 

Seconds until address is removed from table. 

Router>Status>IP Routes 

This lists the contents of the Total Access 600R's IP router table. 

Router>Status>IP Routes>IP Address 

Network or host destination address 

Router>Status>IP Routes>Netmask 

Network mask applied to the destination address 

Router>Status>IP Routes>Gateway 

Host or router to receive this packet 

Router>Status>IP Routes>Port 

Port gateway is located on: 



wanO 



LOCAL 



ETHO 



Sent directly to the Total Access 600R router 
Total Access 600R's ethernet port 
Total Access 600R's first PPP bundle 



FR 0 . . . 



FR 9 



Total Access 600R is connected up to 10 DLCIs 



Router>Status>IP Routes>Use 

Number of times the Total Access 600R has referenced the route 
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Router>Status>IP Routes>Flags 

Important tags associated with this route entry 

H route is a host route 

G route is a gateway route 

D route learned dynamically from RIP 

I route learned from an ICMP redirect 

P route is private and is not advertised with RIP 

T route is to a triggered port (updates only when table changes) 

Router>Status>IP Routes>Hops 

Number of routers that must go through to get to destination. Ranges from 0-15 or 16 for infinite (can't get 
there from here). 



Router>Status>IP Routes>TTL 

Seconds until address is removed from table. Value of 999 means route is static. 

Router>Status>WAN Stats 

This shows traffic over the WAN interface and contains generic WAN statistics on the HDLC hardware port. 

Tx Bytes total number of raw bytes sent out HDLC 

Rx Bytes total number of raw bytes received in HDLC 

Rx CRCs total number of CRC errors detected on HDLC 

Clear Counts when activated, clears all WAN stat counts 

Router>Status>LAN Stats 

This shows traffic over the LAN interface and contains statistics for the Ethernet port. 



Tx Packets 

Rx Packets 

Tx Errors 

Single Collisions 
Multiple Collisions 



packets transmitted out the Ethernet port 
packets received from the Ethernet port 
total transmit errors encountered on Ethernet port 
total single collisions before successful transmission 
total multiple collisions before successful transmis- 



Excessive Collisions 
Deferred Transmissions 
Carrier Sense Errors 

Rx Errors 
CRCs 
Giants 

Runts 

Rx Collisions 
Clear Counts 



total collisions that resulted in packet being dropped 

total packets deferred due to collisions 

total carrier sense errors encountered (no link integri- 

ty) 

Total packets received in error and dropped 

total packets detected with CRC errors 

total packets received that were greater than 1518 
bytes 

total packets received that were less than 64 bytes 
total collisions that occurred during reception 
When activated, clears all LAN Stat counts. 
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Router>Status>IP Stats 

This menu contains IP statistics that can be useful when diagnosing problems. All are taken from the SNMP MIB-2 
variables. 

TCP Failed Attempts 
TCP Passive Connections 
TCP Current Connections 
TCP Segments Sent 
TCP Segments Received 
Total TCP Resets 
Active TCP Connections 
Total TCP Retransmits 
UDP Datagrams Sent 
No Application at Dest Port 
UDP Datagrams Received 
UDP Bad Packets 
ICMP Redirected Messages 
ICMP Packet Errors 
ICMP Timeouts Received 
ICMP Messages Sent 
ICMP Messages Received 
ICMP Specific Errors 
IP Datagrams Reassembled 

ROUTER>l_OGS 

The Logs menu (Figure 1 1 on page 60) contains logs displaying important information about the running condition of 
the Total Access 600R. The logs can be set to capture diagnostics of error conditions only by way of a log level. The 
levels are divided up as follows: 

level 0 - Fatal event (causes reset) 

level 1 - Critical event 

level 2 - Error event 

level 3 - Warning event 

level 4 - Notify event 

level 5 - Informational event 

level 6 - Debugging event 



IP Datagrams Sent 

IP Datagrams Received 

Total Forwarded Datagrams 

IP Reassembly Timeout 

Discarded Routing Entries 

Total IP Fragments 

Failed Fragments 

IP Reassembly Failures 

Disassembled Fragments 

Error free discards 

routeless discards 

Default TTL 

Bad IP Address 

Successful Fragments 

Bad Header Packets 

Sent datagrams to upper layers 

Datagrams Discarded 

Bad Protocol Discards 

Clear Counts 
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Figure 11. Router/Logs Menu 



Router>Logs>Syslog Host 

Set this to the IP address or domain name (if DNS configured) of the syslog host device. All log events are sent to this 
device. 

Router>Logs>PPP Log 

Information pertaining to the PPP negotiation and authentication is logged in the PPP log. 
The PPP log contains the following elements. 

Active 

When set to YES (def), PPP events below or equal the log level are logged into the log. 
Wrap 

When set to YES (def), new PPP events will overwrite old PPP events when the log is full. All logging 
will stop when the log is full and set to No. 

Level 

In order to log events, they must be at or below this level. Range is 0 to 6. The default is 3. 
View 

This menu displays the log list. The fields are as follows: 



Date/Time Date and time event occurred. 
Level Level associated with this event (0-6). 

Message Text message for this event. If message is too long to fit on the line, another 
event appears below it continuing the message. 
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Clear 

This clears the log when activated. 

Modules Menus 
modules>modules 

The MODULES/MODULES menu provides options that allow you to configure and control the network interface. Figure 
12 shows the MODULES/MODULES menu. 
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Figure 12. Modules Menu 



To view the menus for the network interface via the terminal menu, use the arrow keys to scroll to the appropriate 
menu; then press Enter. 

The table contains TYPE, MENU, ALARM, TEST, and STATUS indicators/menus. This document describes these menus 
for the Net (Tl) interface. 

Modules>Modules>Slt 

Identifies the slot number. Slot 0 refers to the Total Access 600R. This is a read-only field. 

Modules>Modules>Type 

TYPE is displayed as NET (T1) indicating the network interface. This is a read-only field. 

Modules>Modules>Menu 

PRT identifies the port number. One is the port number of the network Tl interface. 

Modules>Modules>Menu>Desc 

Displays the name of the Tl interface being configured: NET (network). 
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Modules>Modules>Menu>Format 

This sets the frame format for the Tl interface. The setting must match the frame format of the circuit to 
which the interface is connected. Choices are ESF, SF, SLC96 ALARM-16, and SLC96 ALARM-13. 
EXTENDED SiJPERFRAME (ESF) provides a nondisruptive means of full-time monitoring on the facility 
datelined (FDL). Default is ESF. 



Modules>Modules>Menu>Line Code 

This sets the line code for the Tl interface. The setting must match the line code of the circuit to which the 
interface is connected. Choices are B8ZS (bipolar with 8-zero substitution) and AMI (alternate mark inver- 
sion). Default is B8ZS. 

Modules>Modules>Menu>Equalization 

Select the line build out for the Tl interface. The setting of this field depends on whether the circuit is provi- 
sioned for DS1 by the telephone company. The choices are 0 dB, -7.5 dB, -15 dB, -22 dB. Default is 0 



Modules>Modules>Menu>CSU Lpbk 

Choices are ENABLE, DISABLE, and DISABLE ALL. Default is ENABLE. This allows us to either respond or 
not respond to CSU loop up commands. 

Modules>Modules>Alarm 

Indicates whether there is an alarm condition on a Tl interface. An asterisk in a field indicates that an alarm is active. 
Press Enter to access the Alarm menu. 




SF is equivalent to the D4 frame format. 



dB. 



Prt 



Displays the port number. 



Loss of Signal 



No signal detected on port interface. 



(LOS) 



Red Alarm 



Not able to frame data received on the port. Alternately referred to as Out 
of Frame (OOF). 



(RED) 



Yellow Alarm 
(YELLOW) 



Remote alarm indicator (RAI) being received on port. 



Blue Alarm 



Receiving unframed all ones from the port alarm indicator signal (AIS). 



(BLUE) 
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Modules>Modules>Test 

These options are used to initiate local and remote loopback tests and display the test status. 

Modules>Modules>Test>Loc LB 

Loopback of the local unit. Choices are NONE, LINE, and PAYLOAD. LINE LOOPBACK loops all of the 
received data back toward the network. The transmitted data is the identical line code that was received, 
including any bipolar violations. PAYLOAD LOOPBACK is similar to line loopback except that the framing is 
extracted from the received data and then regenerated for the transmitted data. NONE disables the loopback 
test. Default is NONE. 

Modules>Modules>Test>Rem LB 

Loopback of remote unit. Choices are NONE, LINE, and PAYLOAD. LINE LOOPBACK loops all of the 
received data back toward the network. The transmitted data is the identical line code that was received, 
including any bipolar violations. PAYLOAD LOOPBACK is similar to line loopback except that the framing is 
extracted from the received data and then regenerated for the transmitted data. NONE disables the loopback 
test. Default is NONE. 

Modules>Modules>Test>Test Status 

Indicates whether a test is in progress. 

Modules>Modules>Status 

Displays Tl performance data. 

Modules>Modules>Status>Time Frame 

Choices are CURRENT, 15 MlN, and 24 Hr. Default is CURRENT. The performance fields -- either CUR- 
RENT, 15 MlN, or 24 HR. — provide status on key performance measures as specified in ANSI T 1.403 and 
AT&T TR 54016 for the Tl port. When CURRENT is chosen, the performance data for the current 15 minute 
window is shown. 

Modules>Modules>Status>Clear 

Clears information for the Tl port. Press Enter when the cursor is over this field to clear the data. 

Modules>Modules>Status>ES 

Errored Seconds. An ES is a second with one or more error events or one or more Out Of Frame events or 
one or more Controlled Slips. 

Modules>Modules>Status>SES 

Severely Errored Seconds. An SES is a second with 320 or more error events or one or more Out Of Frame 
events. 

Modules>Modules>Status>SEF 

Severely Errored Frames. 

Modules>Modules>Status>FS 

Frame Sync Errors. 
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Modules>Modules>Status>LCV 

Line Code Violations. 

Modules>Modules>Status>SLP 

Slip Error Events. 

Modules>Modules>Status>UAS 

Unavailable seconds. 

Modules>DSO Maps 

The Modules/DSO Maps menu allows you to map network Tl time slots to the internal router. You can edit one of two 
maps stored in nonvolatile memory and make one of the maps the currently active map. 

Modules>DSO Maps>Active Map 

Activates one of the two dedicated maps (MAP 1 or MAP 2). Default is MAP 1 . 

Modules>DSO Maps>Apply Template to Map 1 

Choices are CURRENT MAP 1 , CURRENT MAP 2, and CLEAR MAP. Default is CURRENT MAP 1 . CLEAR MAP clears 
the entire map. 

Modules>DSO Maps>Map 1 

Uses the currently defined map 1. The map 1 allows the user to assign slots and ports to individual DSOs 1-24. 

Modules>DSO Maps>Map 1>DS0 

Displays the network Tl time slot to be assigned. 

Modules>DSO Maps>Map 1>Slot 

The first option is Open, which unassigns the slot if selected. Use RCU:TA 600 to map network timeslots to 
the router. Pick the appropriate slot and press <Enter>. Default is OPEN. 

MODULES>DS0 MAPS>MAP 1>Port 

The selection list shows only the remaining ports available to be assigned. It may be necessary to unassign a 
port in order to reassign it elsewhere. For the RCU:TA 600, the port choices are Unassigned, Router 56K, 
and Router 64K. Default is N/A. 

Modules>DS0 Maps>Map 1>RBS 

Robbed Bit Signaling is N/A. 

Modules>DS0 Maps>Apply Template to Map 2 

Choices are CURRENT MAP 1 , CURRENT MAP 2, and CLEAR MAP. Default is CURRENT MAP 2. CLEAR MAP clears 
the entire map. 

Modules>DS0 Maps>Map 2 

Define map 2. The map 2 allows the user to assign slots and ports to individual DSOs 1-24. 
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Modules>DSO Maps>Map 2>DS0 

Displays the network Tl time slot to be assigned. 

Modules>DSO Maps>Map 2>Slot 

The first option is OPEN, which unassigns the slot if selected. Use RCU:TA 600 to map network timeslots to 
the router. Pick the appropriate slot and press <Enter>. Default is Open. 

Modules>DS0 MAPS>MAP 2>Port 

The selection list shows only the remaining ports available to be assigned. It may be necessary to unassign a 
port in order to reassign it elsewhere. For the RCU:TA 600, the port choices are Unassigned, Router 56K, 
and Router 64K. Default is N/A. 

Modules>DS0 Maps>Map 2>RBS 

Robbed Bit Signaling is N/A. 
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Appendix A. Configuring the Total Access 600R for Routing 
Initial Setup 

Before the Total Access 600R can be configured for routing, DSOs must be mapped. (See DSO Mapping below.) 
DSO Mapping 



DSO Mapping Instructions 


Step 


Action 


1 


From the Main menu, select Channel Bank and then select DSO Maps. 


2 


Verify that the Active Map is set to either Map 1 or Map 2. This is the 
map that is actively running on the Total Access 600R. The unit has the 
ability to store two maps. 

• To edit the current map, press Enter on Map 1 [+] to view the map. 
(If Map 1 is the Active Map) 

• To edit the standby map, press Enter on Map 2 [+] to view the map. 
(If Map 1 is the Active Map) 




The Tl line entering the Total Access 600R is broken up into 24 DSOs 
or channels. At least one DSO needs to be mapped to the router in 
order to use the unit for routing purposes. 


3 


Scroll down to the DSO that will be mapped. (Any DSO can be mapped 
to the router.) 


4 


Set the Slot number of the DSO that you are mapping to RCU:TA600. 


5 


Set the Port of the DSO that you are mapping to Router 64K or Rout- 
er 56K, depending on the line speed. 


6 


Map all the DSOs as desired, and exit this menu by pressing the left ar- 
row button. Your changes will automatically save when exiting the map. 


7 


Make sure the Active Map is set to the correct map (the map you want 
running) before exiting the Modules/DSO Maps menu. 
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Setting up Routing Options 

The Total Access 600R can support IP routing and bridging. These procedures are described on the pages that follow. 

IP Routing 

There are three steps required for the Total Access 600R to be used for IP Routing: (1) Global IP Setup, (2) Ethernet 
IP Setup, and (3) WAN IP Setup. All of these procedures are described in the pages that follow. 

Global IP Setup 

For basic IP routing, use all of the default values from the Global configuration menu. 



Global IP Setup Instructions 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
Global. 


2 


Press Enter on the IP [+] option. 


3 


Set the Mode to On. 


4 


Press Enter on the Static Routes [+] to place static routes in the rout- 
ing table. 


5 


Press Enter on DHCP Server [+] if the Total Access 600R needs to 
serve IP addresses to Ethernet devices. 


6 


Set the DHCP Mode to On. It is Off by default. 


7 


To place DNS information in the Total Access 600R, press Enter on 
DNS [+]. Enter Server IP addresses in the server fields. 
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Ethernet IP Setup 



Ethernet IP Setup Instructions 




Artinn 

nu HUM 


1 


From the Main Menu, select Router, select Config, and then select 

1 1 HbKNb 1 . 


2 


r ress Enier on ine rKiwiAKY ir opuon 10 enier primary einernei con- 
figuration. 


3 


Set the IP Address of the Ethernet port. 


4 


Set the Subnet Mask of the Ethernet port. 


5 


Set the Default Gateway of the Ethernet port if needed. 


6 


RIP on the Ethernet is disabled by default. If RIP needs to be enabled, 
press Enter on RIP [+] 


7 


Press the left arrow key to return to the main Ethernet menu. 


8 


If the Total Access 600R needs additional secondary IP addresses, 
press Enter on Secondary IPS [+].The Total Access 600R supports up 
to 10 additional LAN segments. 

Enter each additional secondary IP address and subnet mask. Press "I" 
to insert additional entries. 
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WAN IP Setup 

For WAN IP setup, choose either PPP IP Setup or Frame Relay IP Setup. Both of these procedures are described on 
the pages that follow. 



WAN IP Setup - PPP IP Setup Instructions 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
WAN. 


o 


bet tne LZ protocol to rrr. 


3 


Press Enter on the PPP Profile [+] option. 


4 


Press Enter on the Authentication [+] option if you wish to change 
options related to how the link is established. Default is Tx Method = 
PAP, CHAP, OR EAP. 


5 


Press the left arrow key to return to the WAN/PPP Profile menu, and 
then press Enter on the IP [+] option. Verify that Mode is On 


6 


Arrow down to Route [+] to enter WAN IP information. 




Enter WAN information: 

• Far-End IP Address The far-end WAN IP address from the 

Total Access 600R. 


7 


• Subnet Mask The subnet mask for this WAN link 

• Local IP The local WAN IP address for the Total 

Access 600R. 

The other config items can be left at the defaults. 


8 


Use the <Esc> key to return to the top level Total Access 600R menu. 
Confirm any necessary changes. 


9 


For NAT configuration, please see IP Routing with NAT. 
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WAN IP Setup - Frame Relay IP Setup Instructions 

(required if the Total Access 600R is to be used for Frame Relay IP Routing on the 
WAN interface) 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
WAN. 


2 


Set the L2 Protocol to Frame Relay. 


3 


Press Enter on the Frame Relay [+] option. 


4 


Set the Maintenance Protocol to Annex D, Annex A, LMI, or 
Static. 




The MAINTENANCE PROTOCOL should be set based on the Frame 
Relay switch. 




WAN IP Setup-Frame Relay IP Setup - Map DLCIs 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and press Enter 
on the Frame Relay [+] option. 


2 


Press Enter on DLCI Mapping [+]. Right arrow one time to create an 
entry. 


3 


Set Active to Yes. 


4 


Set DLCI to the DLCI number. 


5 


Press Enter on the IP Map [+]. 


6 


Set Active to Yes. 


7 


Set IARP to No. 




Configure WAN IP information 

• Far-End IP Address The far-end WAN IP address from the 

Total Access 600R. 


8 


• Subnet Mask The subnet mask for this WAN link 

• Local IP The local WAN IP address for the Total 

Access 600R. 

The other config items can be left at the defaults. 


9 


For NAT configuration, please see IP Routing with NAT. 


10 


Press <Esc> to return to main menu. Confirm all changes by pressing 
"y" when prompted. 
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WAN IP Setup - IP Routing with NAT 


Step 


Action 


1 


Depending on whether you are doing PPP or Frame Relay, the NAT menu is found 
under Router/Config/WAN/PPP Profile/IP/NAT or Router/Config/WAN/Frame 
Relay/DLCI Mapping/IP Map/NAT. The NAT menu can be easily accessed by 
pressing <Ctrl><N>. The <Ctrl> <N> command will take you to the Frame Relay NAT 
menu if the L2 Protocol is set to Frame Relay. The <Ctrl> <N> command will take 
you to the PPP NAT menu if the L2 Protocol is set to PPP. 


2 


hrom the NAI menu, set NETWORK ADDRESS 1 RANSLATION to ENABLED. ( 1 his Will 

enable translation and populate the corresponding NAT menu options.) 




bet PUBLIC Ir ADDRESS MODE to either INTERFACE or SPECIFIED. 




• INTERFACE is the default and will use the WAN IP address for the NAPT address. 


3 


• SPECIFIED allows you to enter another public address for private addresses to be 
translated into. 

For basic NAT, this is all of the configuration that needs to be done. 

For specific port translations or 1:1 mapping, you can enter TRANSLATION TABLE [+]. 


4 


From the TRANSLATION TABLE menu, create a new entry by using the right arrow to 
enter the table. 




Create specific NAT translations based on your application. 




Public Address Mode 


NAPT Addr (Address) or Specified. Choice of using the 
NAPT address or specifying a different public address to 
be used for this translation. 




Protocol 


Protocol for this translation. 




Public Port Mode 


Specified or Any Port. Choosing Specified brings up 
the Public Port and Public Port Type (read-only) 
settings. 




Public Port 


Numeric Public Port number to be translated (i.e., 23, 
80). 


5 


Public Port Type 


Read-only port type chosen by the user setting of the 
Public Port option. 




Private Address Mode 


Specified or Any Internal. Choosing Specified brings 
up the Private Address option. 




Private Port Mode 


Specified or Any Port. Choosing Specified brings up 
the Private Port option. 




Private Port 


Numeric Private Port number to be translated to (i.e. 23, 
80). 




Translate Body 


Yes or No. If set to YES, this will translate the body of the 
data packet and replace the private address with the 
NAPT address. Default is No, which is used for most 
applications. 
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Appendix B. Configuring the Total Access 600R for Bridging 
Initial Setup 

Before the Total Access 600R can be configured for bridging, DSOs must be mapped. (See DSO Mapping on page 66). 

Setting up Bridging Options 

If the Total Access 600R will be used for bridging, continue with the steps below. 
Bridging 

There are two steps required for the Total Access 600R to be used for Bridging: (1) Global Bridging Setup and (2) 
WAN Bridging Setup. Both of these procedures are described on the pages that follow. 

Global Bridging Setup 



Global Bridging Setup Instructions 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
Global. 


2 


Press Enter on the Bridge [+] option. 


3 


Set the Mode to On. Return to the main Global menu. 


4 


Press Enter on the IP [+] option. 


5 


Set the Mode to Off. 


6 


Return to the main menu. Confirm all configuration changes with "y" for 
yes. 



WAN Bridging Setup 

Choose one of the following options: PPP Bridge Setup or Frame Relay Bridge Setup. Both of these procedures are 
described on the pages that follow. 



WAN Bridging - PPP Bridge Setup Instructions 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
WAN. 


2 


Set the L2 Protocol to PPP. 


3 


Press Enter on the PPP Profile [+] option. 


4 


Press Enter on the Bridge [+] option. 


5 


Set the Mode to On. 


6 


Return to the main PPP Profile [+] menu. 
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WAN Bridging - PPP Bridge Setup Instructions (Continued) 


7 


Press Enter on the IP [+] option. 


8 


Set the Mode to Off. 


9 


Press <Esc> to return to the main menu. Confirm all configuration 
changes with "y" for yes. 




WAN Bridging - Frame Relay Bridge Setup Instructions 


Step 


Action 


1 


From the Main Menu, select Router, select Config, and then select 
WAN. 


2 


Set the L2 Protocol to Frame Relay. 


3 


Press Enter on the Frame Relay [+] option. 


4 


Set the Maintenance Protocol to Annex D, Annex A, LMI, or 
Static. 


% 


The MAINTENANCE PROTOCOL should be set based on the Frame 
Relay switch. 




WAN Bridging - Frame Relay Bridge Setup - Map DLCIs 


Step 


Action 


1 


From the Main Menu, select Router, select Config, select WAN, and 
press Enter on the Frame Relay [+] option. 


2 


Press Enter on DLCI Mapping [+]. 


3 


Press Enter on the Bridge Map [+] of each DLCI you wish to set up for 
bridging. 


4 


Set Active to Yes. 


5 


Set the Bridge Group. 


6 


Return to the DLCI list. 


7 


Press Enter on the IP MAP [+] option. 


8 


Set Active to No. 


9 


Return to the main menu. Confirm all configuration changes with "y" for 
yes. 
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